# This AI worm just rewrote its own rules Page: https://stenobird.com/podcast/smashing-security-453614/this-ai-worm-just-rewrote-its-own-rules Text version: https://stenobird.com/podcast/smashing-security-453614/this-ai-worm-just-rewrote-its-own-rules.md Podcast: [Smashing Security](https://stenobird.com/podcast/smashing-security-453614) Published: 2026-06-10T23:00:40+00:00 Episode link: https://www.smashingsecurity.com/471 Audio file: https://audio4.redcircle.com/episodes/b421cec5-45e2-4e63-ac62-161d701a1592/stream.mp3 Processing state: not_requested JSON: https://stenobird.com/v1/public/podcasts/smashing-security-453614/episodes/this-ai-worm-just-rewrote-its-own-rules Duration seconds: 2787 ## Resource Researchers at the University of Toronto have built a worm that thinks for itself. Using free off-the-shelf AI models it works out how to break into each new computer it encounters, and hijacks the powerful ones to host its own AI brain. And then the researchers discovered their creation had quietly removed the list of machines it wasn't supposed to attack. Meanwhile, Meta's shiny new AI customer support agent has been cheerfully helping hackers help themselves to other people's Instagram accounts. Just keep asking, politely but firmly, to have a password reset sent to a different email address - and the AI will eventually agree. All this and more in episode 471 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest James Ball. EPISODE LINKS: Emmys data leak: update exposes access to award submissions - Cybernews. A $1,000 AI agent found 21 zero-days in FFmpeg, some 23 years old - Martin Cid Magazine. Hackers steal $1.7M condom shipment​ - Cybernews. AI Agents Enable Adaptive Computer Worms - ArXiv. 21 Zero-Days in FFmpeg - Depthfirst. Meta confirms thousands of Instagram accounts were hacked by abusing its AI chatbot - ~this week in security~. Hackers trick Meta AI support bot to infiltrate Obama White House Instagram account - The Guardian. Look-In Star Portrait Challenge - Monkeon. Final Fantasy VII Remake - Square Enix. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) SPONSORS: Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off! XBOW - The autonomous offensive security platform that helps security teams scale. Start a pentest today. OPSWAT - Read Benny Czarny's book, "Cybersecur… ## Actions - request_transcript: `POST https://stenobird.com/v1/public/podcasts/smashing-security-453614/episodes/this-ai-worm-just-rewrote-its-own-rules/transcription-requests` — Idempotently request low-priority transcript generation for this episode. - read_markdown: `GET https://stenobird.com/podcast/smashing-security-453614/this-ai-worm-just-rewrote-its-own-rules.md` — Read the agent-friendly Markdown representation of this episode resource. A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed. ## Transcript Full transcripts are not published on public pages unless there is a clear rights basis.