{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T07:03:58Z","timestamp":1784099038516,"version":"3.55.0"},"reference-count":52,"publisher":"Frontiers Media SA","license":[{"start":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T00:00:00Z","timestamp":1784073600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["frontiersin.org"],"crossmark-restriction":true},"short-container-title":["Front. Microbiol."],"abstract":"<jats:p>Automated biological laboratories are a growing accelerator of scientific research, enabling remote execution through advanced robotics and computational systems. Automation is deployed across a range of settings, including modular automation platforms, centralized biofoundries, and cloud laboratories. For the most highly automated of these, the defining characteristics include remote operation, limited human oversight, and integrated automation. These technologies might enable fully autonomous biological research, also referred to as \u201cclosed-loop\u201d discovery or self-driving laboratories. They can also introduce new vulnerabilities that existing biosafety and biosecurity frameworks do not sufficiently address. We first map the current landscape of automated biological laboratories, define what distinguishes them from conventional laboratories, and argue that existing biosafety and biosecurity oversight fails to account for risks from the latent capabilities of these laboratories. We then analyze multiple threat vectors, including malicious orders, insider threats, and cyberattacks. Through these vectors, an actor may be able to compromise laboratory infrastructure and orchestrate pathogen synthesis or protein engineering, without the knowledge of laboratory operators. We propose the Automated Laboratory Security Tier (AST) framework to categorize facilities into three tiers based on the biosecurity risks they could pose if fully compromised. We use \u201cfully compromised\u201d to mean an attacker can control protocol execution and relevant information technology and operational technology (IT\/OT) controls sufficiently to bypass all oversight and safeguards. We outline methods to improve customer verification, order screening, cybersecurity measures, insider threat protections, and independent security assessments. Although limited information regarding automated laboratory capabilities is publicly available, we argue that most current automated laboratories do not possess latent capacity for serious harms. These risks appear low for most current facilities, but laboratories outside the scope of our review may possess greater latent capability, and capabilities may advance faster than anticipated. Our analysis draws on expert interviews with automated laboratory operators and biosecurity experts. We recommend that researchers and industry stakeholders engage with standard-setting bodies to establish security standards for automated biological laboratories. With ongoing monitoring of capability levels and adoption of proportionate safeguards, these laboratories can be safely operated.<\/jats:p>","DOI":"10.3389\/fmicb.2026.1832401","type":"journal-article","created":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T06:05:33Z","timestamp":1784095533000},"update-policy":"https:\/\/doi.org\/10.3389\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Automated Laboratory Security Tiers: a framework for evaluating and mitigating biosecurity risks from latent capabilities"],"prefix":"10.3389","volume":"17","author":[{"given":"Matthew D.","family":"Smith","sequence":"first","affiliation":[{"name":"Center for Health Security, Johns Hopkins Bloomberg School of Public Health, Johns Hopkins University","place":["Baltimore, MD, United States"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Moritz S.","family":"Hanke","sequence":"additional","affiliation":[{"name":"Center for Health Security, Johns Hopkins Bloomberg School of Public Health, Johns Hopkins University","place":["Baltimore, MD, United States"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Rebecca L.","family":"Moritz","sequence":"additional","affiliation":[{"name":"Tutela Strategies, LLC","place":["Reno, NV, United States"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"David R.","family":"Gillum","sequence":"additional","affiliation":[{"name":"Tutela Strategies, LLC","place":["Reno, NV, United States"]},{"name":"Compliance and Research Administration, University of Nevada, Reno","place":["Reno, NV, United States"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jaspreet","family":"Pannu","sequence":"additional","affiliation":[{"name":"Center for Health Security, Johns Hopkins Bloomberg School of Public Health, Johns Hopkins University","place":["Baltimore, MD, United States"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1965","published-online":{"date-parts":[[2026,7,15]]},"reference":[{"key":"B1","doi-asserted-by":"publisher","first-page":"e2406320121","DOI":"10.1073\/pnas.2406320121","article-title":"The automated lab of tomorrow.","volume":"121","author":"Adam","year":"2024","journal-title":"Proc. Natl. Acad. Sci. U. S. A."},{"key":"B2","doi-asserted-by":"publisher","first-page":"2400084","DOI":"10.1002\/admt.202400084","article-title":"Scientific discovery at the press of a button: Navigating emerging cloud laboratory technology.","volume":"9","author":"Arias","year":"2024","journal-title":"Adv. Mater. Technol."},{"key":"B3","doi-asserted-by":"publisher","first-page":"e3001919","DOI":"10.1371\/journal.pbio.3001919","article-title":"Support academic access to automated cloud labs to improve reproducibility.","volume":"21","author":"Armer","year":"2023","journal-title":"PLoS Biol."},{"key":"B4","volume-title":"NIH Launches Initiative to Modernize and Strengthen Biosafety Oversight.","author":"Bhattacharya","year":"2025"},{"key":"B5","volume-title":"DNA Synthesis and Biosecurity: Lessons Learned and Options for the Future.","author":"Carter","year":"2015"},{"key":"B6","volume-title":"Biosafety in Microbiological and Biomedical Laboratories (BMBL)","year":"2020"},{"key":"B7","doi-asserted-by":"publisher","first-page":"1016","DOI":"10.1126\/science.1072266","article-title":"Chemical synthesis of poliovirus cDNA: Generation of infectious virus in the absence of natural template.","volume":"297","author":"Cello","year":"2002","journal-title":"Science"},{"key":"B8","doi-asserted-by":"publisher","first-page":"658","DOI":"10.1007\/s11427-015-4866-8","article-title":"Building biological foundries for next-generation synthetic biology.","volume":"58","author":"Chao","year":"2015","journal-title":"Sci. China Life Sci."},{"key":"B9","doi-asserted-by":"crossref","DOI":"10.1007\/978-94-024-2086-9_2","article-title":"Emerging Biosecurity Threats and Responses: A Review of Published and Gray Literature","volume-title":"Emerging Threats of Synthetic Biology and Biotechnology: Addressing Security and Resilience Issues","author":"Cummings","year":"2021"},{"key":"B10","doi-asserted-by":"crossref","first-page":"279","DOI":"10.1007\/978-3-031-26034-6_15","article-title":"The Attack Surface of Wet Lab Automation","volume-title":"Cyberbiosecurity","author":"Dalal","year":"2023"},{"key":"B11","volume-title":"National Risk Estimate: Risks to U.S. Critical Infrastructure from Insider Threat.","year":"2013"},{"key":"B12","doi-asserted-by":"publisher","first-page":"86","DOI":"10.3389\/fbioe.2019.00086","article-title":"Next steps for access to safe, secure DNA synthesis.","volume":"7","author":"Diggans","year":"2019","journal-title":"Front. Bioeng. Biotechnol."},{"key":"B13","volume-title":"2026 OT Cybersecurity Year in Review.","year":"2026"},{"key":"B14","volume-title":"Object[Transaction, ShipToUser] Documentation.","year":"2022"},{"key":"B15","volume-title":"How Cloud Laboratories Work.","year":"2026"},{"key":"B16","unstructured":"Eroshenko\n              N.\n            \n            \n              Wang\n              M.\n            \n            \n              Smith\n              R.\n            \n            \n              Abramson\n              L.\n            \n            \n              Patwardhan\n              T.\n            \n            \n              Jammeh\n              K.\n            \n          \n          Measuring AI\u2019s Capability to Accelerate Biological Research in the Wet Lab.\n          \n          2025"},{"key":"B17","volume-title":"Mandatory Reliability Standards for Critical Infrastructure Protection.","year":"2008"},{"key":"B18","volume-title":"Security Plan Guidance: Section 11(f) \u2013 Tier 1 Security.","year":"2025"},{"key":"B19","doi-asserted-by":"publisher","first-page":"e00407-25","DOI":"10.1128\/msphere.00407-25","article-title":"A possible turning point for research governance in the life sciences.","volume":"10","author":"Gillum","year":"2025","journal-title":"mSphere"},{"key":"B20","doi-asserted-by":"publisher","first-page":"2401164","DOI":"10.1080\/23779497.2024.2401164","article-title":"2023 cyberbiosecurity summit underscores challenges associated with cybersecurity and the rapidly growing bioeconomy.","volume":"9","author":"Guise","year":"2024","journal-title":"Glob. Secur. Health Sci. Policy"},{"key":"B21","doi-asserted-by":"publisher","first-page":"1534","DOI":"10.1126\/science.1213362","article-title":"Airborne transmission of influenza A\/H5N1 virus between ferrets.","volume":"336","author":"Herfst","year":"2012","journal-title":"Science"},{"key":"B22","doi-asserted-by":"publisher","first-page":"2040","DOI":"10.1038\/s41467-019-10079-2","article-title":"Building a global alliance of biofoundries.","volume":"10","author":"Hillson","year":"2019","journal-title":"Nat. Commun."},{"key":"B23","doi-asserted-by":"publisher","first-page":"571777","DOI":"10.3389\/fbioe.2020.571777","article-title":"Automation in the life science research laboratory.","volume":"8","author":"Holland","year":"2020","journal-title":"Front. Bioeng. Biotechnol."},{"key":"B24","doi-asserted-by":"publisher","first-page":"ysaa026","DOI":"10.1093\/synbio\/ysaa026","article-title":"Building a biofoundry.","volume":"6","author":"Holowko","year":"2021","journal-title":"Synth. Biol."},{"key":"B25","doi-asserted-by":"publisher","first-page":"836","DOI":"10.34190\/eccws.23.1.2500","article-title":"The offense-defense balance in cyberspace.","volume":"23","author":"Huntley","year":"2024","journal-title":"Eur. Conf. Cyber Warf. Secur."},{"key":"B26","doi-asserted-by":"publisher","first-page":"420","DOI":"10.1038\/nature10831","article-title":"Experimental adaptation of an influenza H5 HA confers respiratory droplet transmission to a reassortant H5 HA\/H1N1 virus in ferrets.","volume":"486","author":"Imai","year":"2012","journal-title":"Nature"},{"key":"B27","volume-title":"IEC 62443-3-3: System Security Requirements and Security Levels.","year":"2013"},{"key":"B28","doi-asserted-by":"publisher","DOI":"10.1101\/2025.09.12.675911","article-title":"Generative design of novel bacteriophages with genome language models.","author":"King","year":"2025","journal-title":"bioRxiv [Preprint]"},{"key":"B29","volume-title":"Oversight of Laboratory Biosafety and Biosecurity: Current Policies and Options for Congress.","author":"Kuiken","year":"2024"},{"key":"B30","volume-title":"How Canadian Researchers Reconstituted an Extinct Poxvirus for $100,000 Using Mail-order DNA.","author":"Kupferschmidt","year":"2017"},{"key":"B31","doi-asserted-by":"publisher","first-page":"49","DOI":"10.1109\/MSP.2011.67","article-title":"Stuxnet: Dissecting a cyberwarfare weapon.","volume":"9","author":"Langner","year":"2011","journal-title":"IEEE Secur. Priv."},{"key":"B32","unstructured":"Lee\n              Y.-C. J.\n            \n            \n              Del Castello\n              B.\n            \n          \n          Robust Biosecurity Measures Should Be Standardized at Scientific Cloud Labs.\n          \n          2024"},{"key":"B33","unstructured":"Lee\n              Y.-C. J.\n            \n            \n              Persaud\n              B.\n            \n            \n              Del Castello\n              B.\n            \n            \n              Berke\n              A.\n            \n            \n              Zilgalvis\n              G.\n            \n          \n          Documenting Cloud Labs and Examining How Remotely Operated Automated Laboratories Could Enable Bad Actors.\n          \n          2025"},{"key":"B34","volume-title":"Safeguarding the Bioeconomy.","year":"2020"},{"key":"B35","volume-title":"The NIST Cybersecurity Framework (CSF) 2.0.","year":"2024"},{"key":"B36","volume-title":"Enhancing Personnel Reliability Among Individuals with Access to Select Agents.","year":"2009"},{"key":"B37","volume-title":"NIH Guidelines for Research Involving Recombinant or Synthetic Nucleic Acid Molecules.","year":"2024"},{"key":"B38","doi-asserted-by":"publisher","first-page":"e0188453","DOI":"10.1371\/journal.pone.0188453","article-title":"Construction of an infectious horsepox virus vaccine from chemically synthesized DNA fragments.","volume":"13","author":"Noyce","year":"2018","journal-title":"PLoS One"},{"key":"B39","volume-title":"Annual Threat Assessment of the U.S. Intelligence Community.","year":"2025"},{"key":"B40","doi-asserted-by":"crossref","DOI":"10.1007\/978-1-4939-6964-7","volume-title":"Reverse Genetics of RNA Viruses: Methods and Protocols.","author":"Perez","year":"2017"},{"key":"B41","unstructured":"Poste\n              G.\n            \n            \n              Gillum\n              D.\n            \n          \n          Researchers Hacked a Lab\u2019s Pathogen Containment System. Was it a Good Idea to Publish the Results?.\n          \n          2023"},{"key":"B42","volume-title":"Cybersecurity of Genomic Data.","author":"Pulivarti","year":"2023"},{"key":"B43","doi-asserted-by":"crossref","DOI":"10.6028\/NIST.SP.800-160v2r1","volume-title":"Developing Cyber-Resilient Systems: A Systems Security Engineering Approach.","author":"Ross","year":"2021"},{"key":"B44","doi-asserted-by":"crossref","unstructured":"Smith\n              A. A.\n            \n            \n              Wong\n              E. L.\n            \n            \n              Donovan\n              R. C.\n            \n            \n              Chapman\n              B. A.\n            \n            \n              Harry\n              R.\n            \n            \n              Tirandazi\n              P.\n            \n          \n          Using a GPT-5-Driven Autonomous Lab to Optimize the Cost and Titer of Cell-Free Protein Synthesis.\n          \n          2026","DOI":"10.64898\/2026.02.05.703998"},{"key":"B45","volume-title":"Barriers to Bioweapons.","year":"2014"},{"key":"B46","doi-asserted-by":"crossref","DOI":"10.6028\/NIST.SP.800-82r3","volume-title":"Guide to Operational Technology (OT) Security.","author":"Stouffer","year":"2023"},{"key":"B47","doi-asserted-by":"publisher","first-page":"250646","DOI":"10.1098\/rsos.250646","article-title":"Autonomous \u2018self-driving\u2019 laboratories: A review of technology and policy implications.","volume":"12","author":"Tobias","year":"2025","journal-title":"R. Soc. Open Sci."},{"key":"B48","doi-asserted-by":"publisher","first-page":"77","DOI":"10.1126\/science.1119392","article-title":"Characterization of the Reconstructed 1918 Spanish Influenza Pandemic Virus.","volume":"310","author":"Tumpey","year":"2005","journal-title":"Science"},{"key":"B49","unstructured":"2025 Data Breach Investigations Report.\n          \n          2025"},{"key":"B50","doi-asserted-by":"publisher","first-page":"1734561","DOI":"10.3389\/fmicb.2025.1734561","article-title":"Without safeguards, AI-Biology integration risks accelerating future pandemics.","volume":"16","author":"Wang","year":"2026","journal-title":"Front. Microbiol."},{"key":"B51","doi-asserted-by":"publisher","first-page":"841","DOI":"10.1016\/j.chom.2020.04.004","article-title":"An Infectious cDNA Clone of SARS-CoV-2.","volume":"27","author":"Xie","year":"2020","journal-title":"Cell Host Microbe"},{"key":"B52","doi-asserted-by":"publisher","first-page":"1553","DOI":"10.1038\/s41467-025-56751-8","article-title":"Integrating protein language models and automatic biofoundry for enhanced protein evolution.","volume":"16","author":"Zhang","year":"2025","journal-title":"Nat. Commun."}],"container-title":["Frontiers in Microbiology"],"original-title":[],"link":[{"URL":"https:\/\/www.frontiersin.org\/articles\/10.3389\/fmicb.2026.1832401\/full","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,15]],"date-time":"2026-07-15T06:05:40Z","timestamp":1784095540000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.frontiersin.org\/articles\/10.3389\/fmicb.2026.1832401\/full"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,15]]},"references-count":52,"alternative-id":["10.3389\/fmicb.2026.1832401"],"URL":"https:\/\/doi.org\/10.3389\/fmicb.2026.1832401","relation":{},"ISSN":["1664-302X"],"issn-type":[{"value":"1664-302X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7,15]]},"article-number":"1832401"}}