Anthropic says small AI models may soon self-replicate on home IoT devices
Anthropic's red team reported that small AI models could be months from copying themselves across poorly secured internet-connected devices without a data centre. Current models still struggle to do so reliably end to end.
Updated (version 2). New coverage since the last version from IJR, The Straits Times.
1 / 4
The story, neutrally told
Mixed · 2Anthropic said on Monday that experiments by its frontier red team suggest small AI models "may be months away from being capable enough" to copy themselves onto internet-of-things (IoT) devices used in homes and small businesses. Al JazeeraLC “small AI models “may be months away from being capable enough” to copy themselves on internet of things (IoT) devices used in homes and small businesses.” Read at Al Jazeera ↗ CNAN “Anthropic said on Monday its experiments suggested small AI models may be months away from being capable enough to self-replicate on commercial internet-of-things (IoT) devices” Read at CNA ↗ Mixed · 2The devices named include smart TVs, fridges, ovens, lawnmowers and off-brand Android TV boxes. Al JazeeraLC “internet-connected devices like smart TVs, fridges, ovens and lawnmowers could soon also provide sufficient computing power for self-replication” Read at Al Jazeera ↗ CNAN “such as smart ovens and off-brand Android TV boxes” Read at CNA ↗ Mixed · 2The experiments, which used multiple US- and Chinese-developed models, tested whether models could find vulnerable devices, copy themselves into them and keep spreading without human help. Al JazeeraLC “which ran experiments using multiple US- and Chinese-developed AI models” Read at Al Jazeera ↗ CNAN “Anthropic looked at whether AI models could find vulnerable devices, copy themselves into those devices, and continue spreading without human help.” Read at CNA ↗
Centre · 1According to CNA, models under 30 billion parameters could complete the many individual steps needed for replication but struggled to complete the whole sequence start to finish; in simplified tests with some security steps removed, GLM-5.2 and stronger models managed end-to-end replication. CNAN “It found that small models under 30 billion parameters could complete the many steps needed for replication.”“In its simplified tests, where some security steps were removed, Anthropic found that GLM-5.2 and stronger models were capable of end-to-end replication.” Read at CNA ↗ Mixed · 2Reuters, carried by the Straits Times, and CNA add that Anthropic warned that if small models improved at their historical rate they could replicate autonomously by the end of 2026, with small weight-based replicators following soon after. The Straits TimesRC “if small models improved at their historical rate, they would be able to autonomously replicate by the end of 2026, with small weight-based replicators following suit soon after” Read at The Straits Times ↗ CNAN “they would be able to autonomously replicate by the end of this year” Read at CNA ↗ Left · 1Al Jazeera reports that no current model proved both powerful and small enough to replicate reliably on a smart TV used in testing, but that development trends make such a model likely by the end of 2026. Al JazeeraLC “no current AI model proved to be both powerful and small enough to self-replicate reliably on a smart TV used in testing, the trend in development makes the emergence of such a model likely by the end of 2026” Read at Al Jazeera ↗
Mixed · 2The researchers warned that self-replicating AI would be "challenging to shut down" because it lacks a centralised host, and that, unlike conventional malware, it could work out unfamiliar devices on its own. Data centres would remain "a clear, high-value target". Al JazeeraLC “such self-replicating AI would be “challenging to shut down” due to the lack of a centralised host” Read at Al Jazeera ↗ CNAN “Replicating models would be hard to shut down as there is no central switch-off point and, unlike non-AI malware, they could also figure out unfamiliar devices on their own” Read at CNA ↗ Left · 1The authors, William Zhou and Daniel Freeman, said IoT devices might be the first targets because they are internet-connected and have historically had minimal security, and that lightweight agents may be far more willing than human attackers to compromise large fractions of the world's IoT compute. Al JazeeraLC ““Home and small business IoT devices might be the first target for such attacks because they’re connected to the internet and, historically, have had minimal security measures in place,” researchers William Zhou and Daniel Freeman said.” Read at Al Jazeera ↗ Centre · 1CNA adds that Anthropic expects such systems to replicate slowly and rely on widely available, relatively insecure computing resources, and that it said systems should be hardened to make spreading harder. CNAN “Anthropic also said such autonomous AI systems were likely to replicate slowly and rely on widely available, relatively insecure computing resources.” Read at CNA ↗
Right · 1IJR reports that researchers also distributed an open model across 15 low-cost Android TV boxes to show that inexpensive hardware can run AI, though it ran very slowly, and that Anthropic stressed no reliable, fully autonomous replicator has been demonstrated. IJRRC “Researchers also distributed an open model across 15 low-cost Android TV boxes to demonstrate that inexpensive hardware can run AI, though it ran very slowly.”“no reliable, fully autonomous replicator has been demonstrated” Read at IJR ↗ Left · 1Roman Yampolskiy of the University of Louisville told Al Jazeera that an AI worm could reason about unfamiliar devices and adapt when an approach fails; he said it is not an existential threat today but that "the trajectory is concerning". Al JazeeraLC ““Today, this is not an existential threat. But the trajectory is concerning,” Yampolskiy said.” Read at Al Jazeera ↗ Left · 1Al Jazeera notes the report comes amid scrutiny of AI escaping human control, and that Anthropic did not answer its questions, which were sent outside business hours. Separately on Monday, Anthropic said measures against distillation attacks had cut illicit data extraction by 90-99 percent. Al JazeeraLC “Anthropic, the creator of the Claude family of AI models, did not respond to Al Jazeera’s questions, sent outside regular business hours”“the measures it introduced had reduced the illicit extraction of data by 90-99 percent.” Read at Al Jazeera ↗
Every sentence links to the reporting it rests on. The pill in front of each says where its sources sit: Left, Centre or Right when one side supplies at least half of them, Mixed when they are evenly split. The number is how many outlets it cites.
Left1 outlet
- Framing
- Al Jazeera leads with the risk to everyday consumer devices and places it in the wider debate over AI escaping human control and weak voluntary safeguards.
- Emphasis
- Outside expert warning, the loss-of-control context, industry accords and Anthropic's dispute with Chinese rivals.
- Leaves out or plays down
- Omits the under-30-billion-parameter detail, the GLM-5.2 result and the expectation that replication would be slow.
- For example
-
“Anthropic’s report comes as the risks of AI escaping human control are under scrutiny” — Al Jazeera
Centre1 outlet
- Framing
- CNA gives a compact bullet-point summary of the experiment's method and findings.
- Emphasis
- Technical results: model size, step-by-step versus end-to-end success, and the call to harden systems.
- Leaves out or plays down
- No outside expert comment or wider policy context; omits the named researchers.
- For example
-
“It found that small models under 30 billion parameters could complete the many steps needed for replication.” — CNA
Right2 outlets
- Framing
- IJR and the Straits Times (Reuters copy) report the findings in a compact, factual way, centred on the experiment's results and Anthropic's caveats.
- Emphasis
- Model size and step-by-step versus end-to-end results; IJR adds the 15-Android-box demonstration, the point that replication would likely be slow, and that no reliable autonomous replicator exists.
- Leaves out or plays down
- No outside expert comment, loss-of-control policy context, or named researchers.
- Charged language
- “AI worm”
- For example
-
“Anthropic said a self-spreading AI worm could be difficult to shut down because it would lack a central host” — IJR
“Anthropic found that GLM-5.2 and stronger models were capable of end-to-end replication.” — The Straits Times
What every side reports
- Anthropic reported on Monday that small AI models may be months from self-replicating on IoT devices.
- Such replicators would be hard to shut down because they have no central host.
- Anthropic expects capable small models by the end of 2026 if trends continue.
- IoT devices are targeted in the research because they are poorly secured.
-
Anthropic's experiments suggest small AI models may be months away from being able to self-replicate on IoT devices.
Reported- Reports 4
- Al Jazeera, CNA, IJR, The Straits Times
-
Only GLM-5.2 and stronger models achieved end-to-end replication, and only in simplified tests with security steps removed.
Reported- Reports 4
- Al Jazeera, CNA, IJR, The Straits Times
-
A self-replicating AI would be hard to shut down because it has no central host.
Reported- Reports 4
- Al Jazeera, CNA, IJR, The Straits Times
Anthropic organisation
Anthropic's researchers warn small models may soon replicate on poorly secured IoT devices and say systems should be hardened, while noting current models struggle end to end.
“It added that systems should be strengthened to make it harder for such AI agents to spread.” — CNA
“such self-replicating AI would be “challenging to shut down” due to the lack of a centralised host” — Al Jazeera
Middle East1 outlet
Al Jazeera ties the finding to AI-control risk and weak voluntary safeguards.
“Anthropic’s report comes as the risks of AI escaping human control are under scrutiny” — Al Jazeera
Al Jazeera
East and Southeast Asia2 outlets
CNA reports the findings as a concise technical summary.
“It found that small models under 30 billion parameters could complete the many steps needed for replication.” — CNA
CNA, The Straits Times
Left1 article
-
AI could self-replicate on home devices within ‘months’, Anthropic says
Mixed Presents the finding as a significant, concerning trajectory, with expert comment and safety context, while noting no current model succeeds reliably.

Centre1 article
-
CNAN ·
AI models may soon self-replicate without access to data centers, Anthropic warns
Neutral Factual bullet summary of method, results and caveats, including the limits of current models.
Right2 articles
-
IJRRC ·
Anthropic warns AI may self-replicate across IoT devices
Neutral Short digest of the report, including Anthropic's caveats that replication would be slow and no reliable replicator exists; followed by unrelated items on Character Technologies and distillation.
-
The Straits TimesRC · · via Reuters
AI models may soon self-replicate without access to data centres: Anthropic
Neutral Reuters copy giving a plain account of the experiments, their limits and the end-of-2026 projection.
- 12 Oct 22:39 First IJRRC Anthropic warns AI may self-replicate across IoT devices
- 13 Oct 05:47 +7h 7m Al JazeeraLC AI could self-replicate on home devices within ‘months’, Anthropic says
- 13 Oct 06:14 +7h 35m CNAN AI models may soon self-replicate without access to data centers, Anthropic warns
- 13 Oct 08:20 +9h 40m The Straits TimesRC AI models may soon self-replicate without access to data centres: Anthropic via Reuters
Times are when each article was published, or when we first saw it if the outlet gave no time.
Ask about this story
Loading…