Artificial intelligence experts are cautioning the public to enhance their cybersecurity practices by using strong passwords and promptly updating software on their devices to combat the emergence of “AI-driven computer worms,” a new form of cyber-threat capable of launching customized attacks on connected devices, depleting resources and stealing information while seeking out new targets.
Researchers at the University of Toronto, in collaboration with the Vector Institute, have demonstrated the potential of publicly available AI models to power a worm that can adapt its attack strategies dynamically as it spreads across internet-connected devices such as laptops, printers, and cameras.
Nicolas Papernot, an associate professor at the University of Toronto and the AI chair at the Canadian Institute for Advanced Research, emphasized the importance of maintaining cybersecurity hygiene, advocating for regular software updates, password changes, and the implementation of multi-factor authentication to mitigate risks.
Unlike traditional computer viruses, worms can autonomously spread from one device to another without human intervention. The AI-powered worm developed by the University of Toronto researchers is designed to gather information as it navigates between devices, exploiting vulnerabilities and weak points to facilitate further infiltration.
Papernot highlighted the sophistication of AI-driven worms, emphasizing their ability to create tailored attack strategies for each victim device encountered, making them more challenging to defend against compared to conventional cyber threats.
The cost-effectiveness and agility of AI-driven worms pose a significant challenge to cybersecurity defenses, enabling hackers to target a larger number of victims with minimal resources. This shift in threat landscape underscores the urgency for individuals and organizations to prioritize cybersecurity measures to safeguard against evolving cyber threats.
A recent survey by the Communications Security Establishment (CSE) revealed that while a majority of respondents regularly update their software and use complex passwords, there is room for improvement in ensuring the adoption of unique passwords and robust cybersecurity practices.
Papernot’s research underscores the critical need to bolster cybersecurity measures in Canada, particularly in safeguarding vital infrastructure and essential services that are increasingly interconnected and vulnerable to cyberattacks.