Scientists have demonstrated how advanced AI systems could significantly increase the capabilities of computer worms—self-replicating malware that spreads automatically from one system to another without human intervention. The research, reported by The New York Times, highlights a potential future cybersecurity threat in which AI-powered worms can identify vulnerable systems, adapt to defenses, and spread more effectively than traditional malware. Researchers stress that the work was conducted to understand emerging risks rather than to create deployable cyberweapons.
Computer worms have been a major cybersecurity concern since incidents such as the 1988 Morris Worm and later attacks like Stuxnet. Traditionally, worms rely on predefined instructions and known vulnerabilities. The researchers found that integrating advanced AI capabilities could allow malware to make decisions dynamically, enabling it to navigate unfamiliar environments, identify weaknesses, and modify its behavior in response to obstacles. This adaptability could make future cyberattacks more difficult to detect and contain.
Experts involved in the study warn that defensive cybersecurity practices may struggle to keep pace if malicious actors begin incorporating powerful AI models into offensive tools. AI-assisted attacks could accelerate vulnerability discovery, automate exploitation, and reduce the technical expertise required to conduct sophisticated cyber operations. The findings add to growing concerns among security professionals that AI may increasingly shift the balance between attackers and defenders.
At the same time, researchers emphasize that the study is intended as a warning rather than a prediction of inevitable outcomes. By identifying these risks early, cybersecurity teams, governments, and technology companies can develop safeguards, monitoring systems, and defensive AI tools designed to counter emerging threats. The work underscores a broader reality of the AI era: the same technologies that can strengthen cybersecurity and automate defense may also create new opportunities for cybercriminals, making proactive preparation essential.
