Artificial intelligence experts are cautioning the general public to utilize strong passwords and promptly update software on their devices to counter the emergence of “AI-driven computer worms,” a new form of cyber threat capable of launching personalized attacks on devices, draining processing power and data as they search for new targets.
In a recent development, a team from the University of Toronto, led by Nicolas Papernot, the AI chair at the Canadian Institute for Advanced Research, disclosed that publicly accessible AI models can fuel a worm that can adjust its attack strategy on the go while spreading across internet-connected devices like laptops, printers, and cameras.
Collaborating with the Vector Institute, the research findings were shared with key national science, security, and defense entities before being made public. Papernot, also an associate professor at U of T specializing in computer engineering and computer science, emphasized the importance of not ignoring software update notifications and regularly changing passwords during a panel discussion hosted by the university.
Unlike traditional computer viruses, worms spread autonomously between machines without human intervention. The U of T researchers highlighted that the worm they engineered in a controlled environment gathers intelligence as it traverses devices, exploiting new breaches to unlock additional machines.
In a real-world scenario, such a worm could access the internet, learn from warnings about newly identified vulnerabilities, and surpass software patches intended to thwart them. Papernot stressed that while some issues can be resolved with software updates, others, such as weak passwords and inadequate IT configurations, require more comprehensive solutions beyond patch deployment.
Papernot warned that AI-driven worms not only outperform their predecessors but are also cost-effective to develop and unleash. Samir Chhabra, director general of marketplace framework policy at Innovation, Science and Economic Development Canada, noted that the decreased costs associated with these worms enable hackers to target more victims, as the worm utilizes stolen compute power from its targets, reducing the cost of subsequent attacks.
A survey by the Communications Security Establishment (CSE) revealed that a significant percentage of respondents regularly update their device software and use complex passwords. However, Papernot emphasized the necessity to enhance cybersecurity measures in Canada, particularly concerning critical infrastructure’s exposure to the internet.
As concerns about AI continue to escalate, experts are urging individuals and organizations to prioritize cybersecurity best practices to mitigate the evolving threat landscape.