AI-Designed Viruses Just Opened a Biosecurity Pandora’s Box

Estimated reading time: 10 minutes

Key Takeaways

• The words “AI-designed viruses” would have sounded like science fiction five years ago.
• In August 2026, scientists at the Arc Institute in Palo Alto, California confirmed they had used a genome language model called Evo to generate entirely new viral genomes from scratch.
• Sixteen of them actually worked.
• The ability to compose viral genomes using generative AI now exists; the governance to safely steer it does not.
• Purely computational (i.e., in silico) research that may include development of computational models and software, or may use such means to design novel forms of biological agents, is not prohibited by this policy unless it involves an “entity of concern.”

The words “AI-designed viruses” would have sounded like science fiction five years ago. Today, they describe a real experiment published in one of the world’s most respected scientific journals — and the results are forcing policymakers, biosecurity experts, and researchers to ask questions nobody has fully answered yet.

In August 2026, scientists at the Arc Institute in Palo Alto, California confirmed they had used a genome language model called Evo to generate entirely new viral genomes from scratch. These weren’t modified versions of existing viruses. They were novel, functional bacteriophages — viruses that infect bacteria — produced through what researchers are calling generative biology. Sixteen of them actually worked.

This is the story of what they built, why it matters, what it still can’t do, and most importantly, what the rules currently say about all of it (spoiler: not much).

—

What the Arc Institute Actually Built with Bacteriophage Genomes

To understand the experiment, you need to know what a bacteriophage is. A bacteriophage (or “phage”) is a virus that infects bacteria, not humans. Scientists have studied phages for over a century. They are used in medicine, particularly in cases where antibiotic-resistant bacteria don’t respond to traditional treatment. Phage therapy — using these viruses as a weapon against dangerous bacteria — is a growing and promising field.

What the Arc Institute team did was different from anything done before with phages. Instead of finding phages in nature or modifying existing ones, they asked an AI model to invent new ones entirely.

The model they used is called Evo. It is a genome language model — think of it like ChatGPT, but instead of being trained on human text, it was trained on biological sequences. Specifically, Evo was trained on data covering roughly 9 trillion nucleotides and a library of approximately 2 million bacteriophage-related sequences. This gave it a deep structural understanding of how viral DNA is put together.

Once trained, the researchers gave Evo one job: write new viral genomes.

Here is what the numbers looked like:

• ~700,000 candidate genomes were generated by the AI
• ~285 to 302 of those were synthesized (physically created) in the lab
• 16 viable bacteriophages were confirmed to actually work

That is a hit rate of roughly 5 to 6 percent from the synthesized batch, and a tiny fraction of the total genomes generated. The researchers loaded their created molecules into bacteria to test them. Those 16 successful viruses not only survived — they infected bacteria, replicated, and spread. Some of them managed to overcome resistance in two strains of E. coli, which suggests they weren’t simple copies of anything found in nature.

The source virus the AI learned from most closely was ΦX174 (Phi X-174), a small, well-studied bacteriophage that is harmless to humans. The entire experiment was deliberately constrained to this relatively safe reference system.

(Source: Science study)

—

Why Generative Biology Is a Genuine Scientific Milestone

This matters beyond the headline numbers. What the Arc Institute team demonstrated is a new capability in generative biology — the idea that AI systems can now design functional biological components from scratch, not just analyze or modify existing ones.

For context, here is what was previously possible and what is new:

What scientists could already do:

• Sequence and analyze viral genomes found in nature
• Modify existing viruses in the lab (gain-of-function research)
• Synthesize known viral sequences using established chemistry

What is new here:

• Using an AI model to compose entirely novel viral genomes with no direct natural template
• Confirming those genomes produce functional, replication-capable viruses
• Demonstrating that AI-generated genomes can display properties — like overcoming bacterial resistance — beyond what simple copying would achieve

This is significant for phage therapy research, antibiotic resistance treatment, and the broader field of synthetic biology. The potential benefits are real. Phages designed by AI could theoretically be tailored to target specific antibiotic-resistant bacteria in ways that natural phages cannot.

But the scientific community is not only celebrating.

Professor Thomas V. Inglesby and Dr. Moritz S. Hanke from the Center for Health Security at Johns Hopkins University wrote an accompanying commentary published alongside the main study in Science. Their words were direct: “Although this is promising for life sciences applications, it also raises urgent biosafety and biosecurity questions. The ability to compose viral genomes using generative AI now exists; the governance to safely steer it does not.”

That last sentence is the one that keeps biosecurity experts up at night.

(Sources: Science study | Science commentary)

—

Stop Letting Manual Work Slow Down Your Business

While researchers race to understand the future of AI-designed systems, forward-thinking businesses are already putting AI to work right now — automating the repetitive tasks that drain your team’s time every single day.

At Flowgrammer, we help businesses remove manual bottlenecks, build smarter workflows, and scale operations without scaling headcount. Whether you’re managing client onboarding, data entry, reporting, or internal communications, there’s a faster way to run your business.

👉 See How Business Automation Can Transform Your Operations

—

The Biosecurity Policy Gap Nobody Has Closed Yet

Here is where the story gets genuinely uncomfortable.

On July 28, 2026 — just days before this study was published — the National Institutes of Health (NIH) released a new policy aimed at stopping high-risk life sciences research. The policy was designed to prevent scientists from conducting experiments that would make biological agents more dangerous, more transmissible, or more resistant to treatment.

This sounds like exactly the kind of regulation that should cover AI-designed viruses, right?

Not exactly.

The official policy document contains a carve-out that has drawn serious attention from the legal and biosecurity communities. It states clearly:

“Purely computational (i.e., in silico) research that may include development of computational models and software, or may use such means to design novel forms of biological agents, is not prohibited by this policy unless it involves an ‘entity of concern.'”

In plain language: if the work happens only on a computer and doesn’t touch a listed dangerous pathogen, it is largely outside the scope of this regulation.

An “entity of concern” refers to recognized dangerous pathogens — things like smallpox, anthrax, or select biological agents already on existing watchlists. The regulation makes sense for those known threats.

But the Arc Institute experiment exposes the flaw in that logic. What if an AI designs a new harmful virus — one that doesn’t appear on any existing list because it has never existed before? At the purely computational stage, it would fall outside the prohibited zone. The physical synthesis of that genome is a separate step, taken by a different person, possibly in a different country, possibly subject to a different set of rules entirely.

This is the regulatory gray zone that biosecurity experts are now describing. The tools to design novel viral genomes are real, accessible, and improving. The rules that govern them are lagging behind.

The NIH policy is not toothless — it does meaningful work in restricting dangerous laboratory experiments. But as legal and policy commentators have noted, the main long-term risk is that genome design tools become easier to access without a clear regulatory trigger until a harmful biological agent is physically created. By then, the design work is already done.

(Sources: NIH policy announcement | New York Times coverage)

—

What the Low Success Rate Actually Tells Us

One number in this story gets used as a comfort: only 16 out of 700,000 generated genomes were viable. That’s an incredibly low hit rate — roughly 0.002 percent of all generated candidates, if you’re calculating from the top.

Skeptics have pointed to this as evidence that AI isn’t really capable of designing dangerous pathogens efficiently. And for now, there is truth in that. Designing a specific, targeted, dangerous pathogen from scratch would require enormous resources, advanced technical knowledge to interpret and synthesize the outputs, and probably far more computing power than a lone bad actor currently has access to.

But this framing has a problem. The 16 viruses that worked weren’t supposed to be perfect. They were supposed to be novel and functional. They achieved that. And critically, they demonstrated properties — like overcoming resistance in two E. coli strains — that suggest the model learned something real and useful about how viruses work, not just how to shuffle genetic code randomly.

The Evo model was trained on a reference system intentionally kept safe. As researchers develop more powerful genome language models trained on broader and more diverse viral data, the efficiency of this process is expected to improve. The 0.002 percent hit rate of 2026 will not look the same in 2028 or 2030.

The scientific process of synthesizing viruses itself is not new — that technology existed well before any AI model was involved. What AI adds is the ability to generate novel candidate designs at a scale and speed that human researchers simply cannot match. That combination — speed, scale, and novelty — is what changes the risk calculation over time.

(Sources: New York Times coverage | CNN coverage)

—

What Experts Say Needs to Happen Next

The conversation among biosecurity professionals is not about shutting down AI research in biology. That ship has sailed, and the legitimate benefits are too large to ignore. Phage therapy, personalized medicine, antibiotic resistance treatment, and drug discovery all stand to benefit enormously from the kind of generative biology that the Arc Institute is pioneering.

The conversation is about governance keeping pace with capability.

Here is what analysts and policy commentators have pointed to as necessary next steps:

1. Extending regulations to cover in silico design

Current rules focus almost entirely on what happens in a physical laboratory. Governance frameworks need to address the computational design phase, not just the synthesis step. This likely requires international coordination, because computational research doesn’t respect national borders.

2. Expanding the definition of “entity of concern”

Right now, the term applies to known pathogens. Experts argue it needs to be broadened to include classes of biological capability — not just specific listed agents. An AI-designed virus that could infect humans would be dangerous whether or not it matches a pathogen already on a government list.

3. Mandatory screening for genome synthesis

Several companies already offer voluntary screening when customers order synthesized DNA sequences. Making such screening mandatory and standardized — especially for novel sequences generated by AI — is a concrete step that doesn’t require redesigning entire regulatory frameworks.

4. Transparency requirements for AI training data

Genome language models are trained on vast biological databases. Understanding what data goes into these models — and restricting access to sequences from the most dangerous known pathogens — is one lever that could reduce misuse risk at the source.

The Johns Hopkins commentary in Science made clear that this governance work is urgent, not theoretical. The capability already exists. The framework to manage it does not.

(Sources: Science commentary | NIH policy announcement)

—

The Bigger Picture for AI and Biology

The Arc Institute experiment is one data point in a much larger trend. AI models are becoming powerful tools in every part of the life sciences — from protein structure prediction (as demonstrated by AlphaFold) to drug molecule design, to now, functional viral genome creation.

This is not inherently bad. Scientists working on curing diseases want these tools. The same technology that could theoretically be misused is also the technology that could produce life-saving phage therapies, better vaccines, and treatments for diseases that still have no cure.

The challenge is that biology — unlike, say, software — has physical consequences. A badly designed piece of code crashes a program. A badly designed or maliciously designed biological agent could do something far worse. This means the standards we apply to AI systems operating in biological design spaces need to be proportionally higher than those we apply to other AI domains.

The fact that the current policy framework has a carve-out for purely computational work is not the result of negligence — it reflects how fast this capability has moved. Eighteen months ago, generating 16 novel functional viral genomes from scratch using an AI model would have been considered a stretch goal. Today it is a published result in Science.

The policy world is catching up. Whether it catches up fast enough is the real question.

(Sources: Science study | New York Times coverage)

—

FAQ: AI-Designed Viruses and Biosecurity

—

Sources used in this article:

• https://www.science.org/doi/10.1126/science.aec2657
• https://www.science.org/doi/10.1126/science.aej8512
• https://www.nih.gov/about-nih/nih-director/statements/announcement-release-us-government-policy-stopping-high-risk-life-sciences-research
• https://www.nytimes.com/2026/08/06/science/ai-viruses-bacteria-arc.html
• https://www.cnn.com/2026/08/06/health/ai-viruses-bacteriophages