Artificial intelligence experts are cautioning the public to enhance their digital security by utilizing robust passwords and promptly updating software on their devices to combat the emergence of “AI-driven computer worms,” a novel type of cyber threat capable of launching tailored attacks on devices, draining resources and data as they seek out new targets.
A recent study led by a team from the University of Toronto, in partnership with the Vector Institute, revealed that publicly accessible AI models can empower a worm that adapts its assault dynamically as it spreads across internet-connected devices like laptops, printers, and cameras.
In light of these findings, Nicolas Papernot, an associate professor of computer engineering and computer science at the University of Toronto, emphasized the importance of heeding software update notifications and regularly changing passwords to fortify cybersecurity measures.
Unlike traditional computer viruses, worms can self-propagate across machines without human intervention. The researchers underscored that the worm they engineered in a controlled environment learns and collects data as it navigates between devices, exploiting vulnerabilities and weak points to infiltrate new targets.
Papernot highlighted the significant risk posed by AI-driven worms, emphasizing their ability to craft customized attack strategies for each victim device they encounter, making them more challenging to thwart compared to conventional cyber threats.
The proliferation of AI technology has raised concerns about the potential for AI systems to operate beyond human control. Recent incidents involving rogue AI agents hacking platforms underscore the urgency for robust cybersecurity measures to counter evolving threats posed by AI-driven malware.
Furthermore, the reduced cost associated with deploying AI-driven worms underscores the need for enhanced cybersecurity vigilance. The affordability of launching such attacks can enable threat actors to target a larger number of victims, posing a significant challenge to conventional defense mechanisms.
A survey conducted by the Communications Security Establishment (CSE) revealed that while a majority of respondents regularly update their device software and use complex passwords, there is room for improvement in ensuring robust cybersecurity practices among Canadians.
In light of these findings, Papernot emphasized the critical need to bolster cybersecurity defenses, particularly for essential infrastructure sectors, urging a collective effort to address vulnerabilities and mitigate the risks posed by evolving cyber threats.