AIToday
AI in HealthcareAI Safety & AlignmentTHE DECODERPublished: Aug 7, 2026, 22:02 JST6 min read

Stanford researchers use AI to design viruses that kill bacteria

Stanford researchers use AI to design viruses that kill bacteria

Key takeaway

  • Researchers at Stanford University and Arc Institute used an AI model called Evo to design working viruses that kill bacteria in the laboratory, demonstrating early success in AI-designed life forms.

  • While the technology could improve treatments for drug-resistant infections, it has exposed a critical gap in biosafety regulation: current U.S. policy does not address risks from AI-generated viral genomes that have never been seen before, leaving regulators without clear guidance on how to evaluate these novel designs.

3 Key Points

  1. What happened

    Stanford University and Arc Institute scientists used an AI system called Evo to propose 700,000 possible viral genomes. The team synthesized 285 sequences as DNA, inserted them into bacteria, and 16 of those produced viruses capable of replicating and destroying their bacterial hosts.

  2. Why it matters

    The work represents an early demonstration of AI-designed life forms and could enable new approaches to phage therapy for multidrug-resistant bacterial infections and gene therapy. However, it exposes a major gap in biosafety rules: the U.S. National Institutes of Health's policy on dangerous pathogens does not cover purely computational viral design unless the virus is already classified as a concern, leaving regulators without clear guidance on how to assess risks from AI-generated genomes that have never existed in nature.

  3. What to watch

    The researchers deliberately excluded human pathogens and related dangerous viruses from Evo's training data to prevent the model from generating them—a precaution that was not mandated by any official rule. Whether Evo's success with the simple 11-gene bacteriophage Phi X-174 would transfer to other virus groups remains unclear, and scaling the method to more complex organisms like human cells would face vastly greater technical hurdles.

In Depth

Read the full story

Scientists at Stanford University and the nonprofit Arc Institute have successfully used artificial intelligence to design functional viruses that kill bacteria, marking what they describe as the "first generative design of complete genomes." The centerpiece is an AI system called Evo, which functions like a large language model but is trained on biological sequences rather than text.

Evo was initially trained on roughly nine trillion nucleotides drawn from millions of animals, plants, microbes, and viruses, learning patterns that run throughout the entire tree of life. In a second, specialized training phase, the researchers focused the model on the 11 genes of the bacteriophage Phi X-174 and about 15,000 of its closest relatives. Samuel King, a doctoral student and study co-author, described this two-stage approach as "the obvious next step." The model then proposed 700,000 possible viral genomes. The team selected the most promising candidates and had 285 sequences chemically synthesized as DNA. When inserted into E. coli bacteria, 16 of those AI-generated viruses successfully replicated and destroyed their bacterial hosts. According to the New York Times, this hit rate represents a marked success; the AI-generated viruses proved as robust as natural ones, and some replicated even faster than the original Phi X-174.

Brian Hie, a computational biologist at Stanford and co-author, reflected on seeing the AI-generated viruses in the lab: "That was pretty striking, just actually seeing this AI-generated sphere." External experts offered mixed reactions. Jef Boeke, a biologist at NYU Langone Health, called the project an "impressive first step" toward AI-designed life, praising the AI's "surprisingly good" performance and its "unexpected" design changes—alterations to gene orders and arrangements that human scientists had not considered. Oliver Crook, a protein chemist at Oxford, emphasized that the viruses were not merely weak copies but fully functional organisms. However, J. Craig Venter, the pioneering synthetic DNA researcher, dismissed the work as "just a faster version of trial-and-error experiments," noting that his own lab had achieved similar results through much slower, manual processes.

The potential applications are significant. Phage therapy—using viruses to treat multidrug-resistant bacterial infections—has long interested the medical community. AI-designed viruses could also serve as vectors in gene therapy, where they carry new genes into human cells, potentially improving both approaches. Yet the risks are equally stark. Venter raised "grave concerns" about applying the same method to dangerous pathogens like smallpox or anthrax, urging "extreme caution" in any viral enhancement research. The regulatory landscape compounds this uncertainty. The U.S. National Institutes of Health released a policy in late July banning experiments that make pathogens more dangerous, but it does not cover purely computational work—designing viral DNA on a computer—unless the target is an already-classified pathogen of concern. Moritz Hanke of Johns Hopkins Center for Health Security identified a dangerous gap: with a virus never seen in nature, "What is the risk of what I've never seen before?" is unanswerable under current rules. A misuse scenario he outlined: "You could say, 'Hey, genomic language model, make me an influenza genome that is modified to be more transmissible or to be more lethal.'"

The Stanford team took its own precautions, deliberately excluding from Evo's training data any viruses that infect humans and any related pathogens from animals, plants, or fungi—a measure that prevents the model from generating such genomes in the first place. Brian Hie explained: "We just wanted to be extra careful." Hanke called this "quite commendable," especially because no official rules mandated it. "Because they don't get any guidance from anywhere on what they should be doing," he noted. Whether Evo's success with the simple 11-gene Phi X-174 would extend to other virus groups remains an open question. Jef Boeke also warned that scaling the method to living cells would face immense complexity: a bacterium like E. coli has about 1,000 times more DNA than Phi X-174, and the combinatorial possibilities would balloon to "way, way more than the number of subatomic particles in the universe." Despite these hurdles, Jason Kelly, CEO of Ginkgo Bioworks, argues that pursuing AI-designed cells should be a national priority, envisioning automated labs that could continuously test AI-generated genomes and feed results back into the model—a "nation-scale scientific milestone," as he put it.

Context & Analysis

The Evo project sits at the intersection of biotechnology innovation and regulatory uncertainty. The Stanford and Arc Institute team trained their AI model first on roughly nine trillion nucleotides from millions of organisms across the tree of life, establishing a broad foundation in biological pattern recognition. Only then did they apply a specialized second training round using Phi X-174 and its close relatives—a deliberate, staged approach that co-author Samuel King described as "the obvious next step."

The results exceeded what external experts expected. Oliver Crook, a protein chemist at Oxford, noted that the AI-generated viruses were "not just sickly versions of stuff that already exists," with some replicating faster than the natural template. Yet this success has thrown into sharp relief a regulatory blind spot. The U.S. National Institutes of Health's July policy on high-risk life sciences bans experiments that make pathogens more dangerous, but it exempts purely computational work unless it involves "an entity of concern"—a category that does not yet account for novel, AI-generated genomes with no natural precedent. Moritz Hanke of Johns Hopkins Center for Health Security describes a "huge disconnect" between research pace and guardrails, warning that a genomic language model could theoretically be asked to generate dangerous viral variants like a lethal influenza strain.

The researchers' own precautions—excluding human pathogens from training data—were not mandated by regulation but adopted voluntarily. Hanke calls this "quite commendable," precisely because the team received no official guidance. The open question is whether success with a simple 11-gene virus translates to other organisms, and whether future researchers will exercise the same restraint without regulatory requirement.

FAQ

How many of the AI-designed viruses actually worked?
Out of 285 sequences chemically synthesized as DNA and inserted into bacteria, 16 of those produced viruses capable of replicating. The AI model Evo had proposed 700,000 possible genomes, but the team pursued only the most promising candidates.
What virus did the researchers use as a template?
The team used Phi X-174, a simple bacteriophage containing only 11 genes and about 5,000 DNA letters. Evo had been trained on about two million bacteriophage genomes before being specialized on Phi X-174 and about 15,000 of its closest relatives.
Why didn't the researchers train Evo on human viruses?
During training, Evo received no data on viruses that infect humans, nor on related pathogens from animals, plants, or fungi, so the model cannot generate those genomes in the first place. Brian Hie, a computational biologist at Stanford and co-author of the study, said "We just wanted to be extra careful," even though no official rules required this precaution.

Get the latest AI in Healthcare news every morning

AI-summarized, only the topics you pick — one digest a day via Email, Slack, or Discord.

Free · takes 30 seconds · unsubscribe anytime

Ask AI

Ask AI anything about this article. Q&As are published on this page for other readers too.

Related Articles

Next articleCTO Circle: 350 engineering leaders share playbook for AI-native organizations

The AI news that matters, in one minute each morning.

Sign up free