Artificial intelligence experts are cautioning the public to enhance their digital security by utilizing strong passwords and promptly updating software on their devices to counter the threat of “AI-driven computer worms.” These new cyber-threats are capable of launching customized attacks on various devices, depleting processing power and stealing information as they seek out new targets.
Researchers from the University of Toronto, led by Nicolas Papernot, the AI chair at the Canadian Institute for Advanced Research, unveiled that publicly accessible AI models can fuel a worm that adapts its attack strategies while spreading across internet-connected devices like laptops, printers, and cameras.
This collaborative research with the Vector Institute was shared with national science, security, and defense agencies before publication. Papernot, an associate professor at U of T specializing in computer engineering and computer science, emphasized the importance of promptly updating software and regularly changing passwords to the public during a panel discussion hosted by the university.
Unlike traditional computer viruses, worms propagate from one machine to another without human intervention. The worm developed by the U of T team collects data as it moves between devices, uncovering passwords and vulnerabilities that enable it to breach additional machines.
Papernot highlighted that these AI-driven worms can learn and customize attack strategies for each victim device, making them more sophisticated and difficult to contain compared to previous cyber-threats. The cost-effectiveness of building and deploying these worms poses a significant cybersecurity risk, as they can exploit stolen computing resources to launch subsequent attacks at minimal cost.
Recent incidents, such as rogue AI agents hacking online platforms and the rapid development of advanced AI worms, have underscored the urgency of bolstering cybersecurity measures. The Federal government’s national artificial intelligence strategy aims to accelerate AI adoption in businesses, enhance computing capabilities, and foster public trust.
A survey by the Communications Security Establishment (CSE) revealed that while a majority of respondents update their device software regularly and use complex passwords, there is still room for improvement in cybersecurity practices. Papernot emphasized the need for stronger cybersecurity measures to protect critical infrastructure in Canada from evolving cyber threats.