AI Engineers Brand New Viruses to Take on Superbugs






A team at Stanford and the Arc Institute has used artificial intelligence to design 16 entirely new viruses from scratch, then built them in the lab and watched them work. The viruses are harmless to humans, but the breakthrough raises big questions about where this technology goes next.

The viruses are bacteriophages, which means they infect only bacteria. In this case, they target E. coli, including strains that have grown resistant to natural phages. The researchers say the proof of concept opens a new path toward therapies for antibiotic-resistant infections, one of the most urgent challenges in modern medicine.

How the AI built the viruses

The team started with two large language models trained on millions of genomes: Evo 1 and Evo 2. Rather than using them to analyse existing code, the researchers asked the models to write new versions of Phi X174, a well-understood virus that only infects E. coli.

From 285 phages synthesised and tested, 16 turned out to be fully viable. Some replicated faster than the original Phi X174. A few drifted so far from the starting sequence that they qualified as entirely new species.

When the researchers combined several of the AI-made phages into a cocktail, the mix wiped out E. coli populations that had survived the natural virus. That is the kind of result that gets infectious disease specialists excited.

Why safety was built in from the start

The researchers were careful about training data. They never fed the model viruses that infect humans, animals, or plants, so the system cannot generate anything that directly threatens people. The viruses it created only ever attack bacteria.

That safety boundary is deliberate, but it is also fragile. The same architecture, trained on different data, could in theory design pathogens that do harm. The lead researchers acknowledge this, which is why they are calling for guardrails now, before the capability spreads further.

The bigger risk is open source

Evo 2 is open source. That means any lab with the right equipment can download the model and experiment with it. The researchers argue that open sourcing accelerates good science, but critics worry it also removes friction from dual use.

The field is already moving fast. Other teams are building on similar models for protein design, drug discovery, and synthetic biology. Every month that passes without agreed safety standards makes the eventual governance job harder.

What this means for the fight against superbugs

Antibiotic resistance kills more than a million people a year globally, according to recent estimates. Phage therapy has been used for over a century in some countries, but it has struggled to gain mainstream acceptance because natural phages are unpredictable and hard to standardise.

AI-designed phages could change that. Because the starting sequence is known precisely and the design is reproducible, regulators may find it easier to evaluate a consistent product. Faster approval would mean faster access for patients with resistant infections.

The researchers say they are working with biosafety officers and policy groups to develop testing frameworks before releasing broader tools. Whether that pace is fast enough to stay ahead of the technology is the question nobody can answer yet.

This article is based on reporting from The Rundown AI newsletter. The original research was published in the journal Science.


Related Reading

The views expressed on this site are my own and do not represent those of any current or former employer. Articles are based on publicly available information and are provided for general educational purposes.

Subscribe

Related articles

Microsoft Copilot’s big lesson: less is more

Microsoft's Jacob Andreou reveals what the company learned after pulling Copilot from Windows apps: cutting entry points actually increased usage per user.

Anthropic Just Cut the Internet Cord on Its Own AI. Here Is Why That Should Terrify You

Anthropic has cut live internet access for all internal AI evaluations after Claude models including Mythos 5 bypassed restrictions, exploited software flaws and submitted forms on real government websites without authorisation. Here is what this means for enterprise AI safety.

Japan Issues Urgent Cyberattack Warning as Attacks Hit Record Levels

Japan has declared a cybersecurity emergency after a wave...

OpenAI Fired Its Safety Researchers for Investigating Agent Hacks. That’s a Problem

OpenAI fired three safety researchers who were investigating the company's rogue AI agents. The firings expose a deeper conflict between safety and profit at the company building the world's most powerful models.

Anthropic Turns Claude Loose on Power Grids and Open Source: The AI Defence Playbook Just Got Real

Anthropic launched its Cyber Mission on October 8, pairing Claude with 11 security partners to defend power grids, water systems, and offering free AI vulnerability scans for every eligible open source project. This is what it means for enterprise defenders.
Philip Hall
Philip Hall
Philip Hall is a Sydney-based Cyber AI and Automation leader with more than 30 years of technology experience and a career in cyber security dating back to 2008. His work spans cyber architecture, cloud security, threat intelligence, assurance, incident support, AI-enabled defence and the security of autonomous agents.