Anthropic study warns small AI models could soon replicate across consumer devices

What happened

Anthropic researchers William Zhou and Daniel Freeman report that small AI models could become capable of autonomous replication across poorly secured consumer devices by the end of 2026. Gemma4-26B-A4B ran across 15 Android TV boxes costing about $55 each, while GLM-5.2 replicated across all eight test nodes in four of five runs; the experiments omitted actual hacking. No current model combines the small size and replication capabilities needed for a fully autonomous AI worm.

Reported by 3 sources

The story so far

Anthropic’s Frontier Red Team used a remotely running GLM-5.2 to deploy Llama3.1-8B across simulated Android devices, but the experiments did not demonstrate a fully autonomous AI worm. In an isolated network of eight GCP nodes running Android 15 emulators, GLM-5.2 reached all eight nodes in four of five trials and seven in the remaining trial. The setup provided unauthenticated Android Debug Bridge access and omitted actual hacking, limiting what it establishes about spreading through real devices. In a separate experiment, researchers manually distributed Gemma4-26B-A4B across 15 Android TV boxes costing about $55 each, achieving 0.39 tokens per second. The Decoder reported that no current model combines the small size and replication capabilities needed for a fully autonomous AI worm. These experiments demonstrated deployment and distributed operation under different conditions, rather than a single model independently spreading and running across consumer devices. Anthropic warned that advances in small models could enable self-replicating malware on poorly secured IoT devices. The reported forecasts differ: Baoyu described a rough projection that smaller models could match GLM-5.2’s tested capability by the end of 2026, and The Decoder reported the same year-end horizon for autonomous replication; Ars Technica quoted Anthropic saying it might become possible by 2027. Ars also reported significant experimental obstacles, tempering Anthropic’s warning that such malware could be difficult to shut down.

Keep reading

Trending now

1. 1Meta Releases Muse Spark Open With Mac and Cloud Support, Topping US Open-Weight Index
2. 2Google Launches Gemini 4 Argon Globally, Expands Paid Access as Benchmark Results Vary
3. 3OpenAI Updates GPT-6 Astra Pro in ChatGPT With Parallel Agents and Faster Responses
4. 4Meta’s New Business Terms Raise Dispute Over Website Crawling and AI Training Rights