Startup Calif alerts Tencent to WeChat hacking worm

The discovery by Calif, a US security startup, marks a notable instance of AI being used to uncover a critical vulnerability rather than to exploit one. The worm in question is especially dangerous because it could self-propagate through WeChat's contact network, potentially amplifying the impact far beyond a single user. That Tencent moved to fix the issue after being alerted shows how AI can also serve defensive purposes in cybersecurity.

This episode arrives amid a string of high-profile AI-powered hacks, underscoring the dual-use nature of the technology. The same models that can identify flaws can also be turned to malicious ends, which is why the international community is paying close attention. The fact that the vulnerability was in WeChat, a super-app central to daily life in China, raises the stakes for cross-border cooperation.

The reported US-China talks on AI, possibly later this month, may benefit from this example as a practical starting point for dialogue. Safety concerns, as experts note, could serve as common ground. However, whether governments can convert such incidents into meaningful agreements remains uncertain, given the broader geopolitical tensions between the two nations.