-of-the-INRIA-(National-Institute-for-Research-i.jpeg?width=1200&height=800&crop=1200:800)
The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.
Researchers from the University of Toronto, Vector Institute, and University of Cambridge have developed a proof-of-concept AI-driven computer worm using large language models. The worm autonomously adapts its attack strategies, posing a significant cybersecurity risk if deployed, though tests were limited to controlled environments with no real-world harm reported.[AI generated]
Why's our monitor labelling this an incident or hazard?
The event involves the use of AI systems (large language models) in the development and operation of autonomous computer worms that can self-replicate and adapt to exploit network vulnerabilities. The researchers' demonstration confirms the AI system's role in enabling a new type of cyberattack that could disrupt critical infrastructure and cause harm to property and communities. Although the study was conducted in a controlled lab setting, the plausible and credible risk of real-world deployment and resulting harm qualifies this as an AI Hazard. However, since the AI-driven worms have not yet caused actual harm outside the lab, it is not an AI Incident. The article primarily warns about the potential for harm and calls for preparedness, fitting the definition of an AI Hazard.[AI generated]