Summary & Key Takeaways ​

• Calif Research has demonstrated "WeWorm," a zero-click worm.
• The worm spreads through WeChat calls across both iOS and Android.
• Victims do not need to interact with their phone for the exploit to succeed.
• AI assisted the team in finding the bug and writing the RCE exploit in two days.
• Building the full worm took an additional week.
• This highlights the accelerated pace of exploit development with AI.

Our Commentary ​

A zero-click worm developed with AI in a week? This is terrifying. We've been talking about AI's potential for misuse, and this is a stark, concrete example. The speed at which these exploits can be generated is genuinely unsettling. We need to be thinking about AI security and defense just as aggressively as we're building new capabilities.