Artificial intelligence experts are advising the public to enhance their online security practices by using robust passwords and promptly updating software on their devices to counter the threat of “AI-driven computer worms.” These advanced cyber-threats are capable of launching tailored attacks on various internet-connected devices, such as laptops, printers, and cameras, thereby compromising processing power and sensitive information as they seek out new targets.
In a recent study, a team from the University of Toronto, in collaboration with the Vector Institute, demonstrated that publicly available AI models can empower a worm that can dynamically adjust its attack strategy while moving between devices. This research, shared with national science, security, and defense entities before publication, highlights the urgency of maintaining strong cybersecurity measures.
Nicolas Papernot, an associate professor at the University of Toronto, emphasized the importance of promptly updating software and regularly changing passwords during a panel discussion. He stressed the necessity of organizations adapting their processes to ensure swift deployment of software patches to mitigate potential risks.
Unlike traditional computer viruses, worms autonomously spread between machines without human intervention. The researchers at the University of Toronto explained that their experimental worm collects data as it traverses devices, identifying vulnerabilities and passwords to facilitate further infections. Moreover, these AI-driven worms can potentially access the internet, learn from emerging security vulnerabilities, and develop sophisticated attack strategies that outpace conventional defense mechanisms.
Papernot highlighted the significant shift in cybersecurity risk posed by AI-driven worms, emphasizing their cost-effectiveness and efficiency compared to conventional threats. The lower costs associated with deploying these worms enable cybercriminals to target a broader range of victims, posing a substantial challenge to traditional defense strategies.
A recent survey by the Communications Security Establishment (CSE) revealed that while a majority of respondents update their software regularly and use complex passwords, there is a gap in employing unique passwords consistently. Papernot emphasized the critical need to bolster cybersecurity measures, especially considering the potential vulnerabilities in critical infrastructure systems exposed to the internet.
The evolving landscape of AI-driven cyber threats underscores the importance of proactive cybersecurity practices to safeguard against potential risks and ensure the resilience of digital ecosystems.
For the full article, click [here](https://www.cbc.ca/news/business/ai-computer-worms-cybersecurity-9.7341021).