AI Worm That Adapts to Any Device: U of T Proves Defences Aren't Ready

In a controlled lab experiment completed in early June 2026, researchers at the University of Toronto demonstrated something the cybersecurity world has long feared: AI isn't just a defensive tool anymore—it can become an adaptive, self-propagating attack weapon that current defences are fundamentally unprepared to stop.

Led by Professor Nicolas Papernot—a Canada CIFAR AI Chair—the team built a prototype "AI worm" using publicly accessible AI models. The result is a class of malware that represents a qualitative leap beyond anything that existed before.

What Makes This Worm Different From Every Malware Before It?

Traditional malware follows a fixed script: hardcoded to exploit a specific vulnerability on a specific type of system. Patch the vulnerability, neutralize the threat.

This AI worm operates on an entirely different principle:

1. Adaptive Attacks — Every Device Gets a Custom Exploit

Instead of running a predetermined script, the worm uses AI to analyze each target device individually and tailor its attack to that device's specific characteristics. IP cameras, printers, laptops, smart HVAC systems, power grid infrastructure, hospital networks—each gets attacked through the exact vector most likely to succeed against it.

The implication: no single patch can stop it. When one approach is blocked, it finds another.

2. Self-Propagation Without User Interaction

The worm spreads across networks without requiring anyone to click a link or open a file. It exploits both technical vulnerabilities and human errors—weak passwords, misconfigured settings—the kinds of weaknesses that can't be fully eliminated through software updates alone.

3. Hijacks Victim Computing Power to Fund Its Own Spread

Perhaps the most alarming capability: each time it successfully compromises a device, the worm to continue propagating. The marginal cost of spreading approaches zero—it self-funds using its victims' hardware.