conv.

All stories
AIActive today · day 4

Anthropic warns AI models could soon self-replicate across smart home devices

Anthropic's Frontier Red Team says small models may be months from copying themselves onto IoT gadgets like smart ovens and TVs, triggering both alarm and heavy skepticism.

Part of a larger narrative

Anthropic's Claude Evolution

7 stories · since Sep 29 · newest 5h ago — Anthropic rapidly advances Claude's capabilities across model tiers while simultaneously establishing new guardrails around AI ethics, pricing accessibility…

  1. Anthropic warns AI models could soon self-replicate across smart home devicesyou are here
  2. Anthropic builds Scion, a git replacement, as Claude pushes merges to 30K per day
  3. Anthropic cuts Claude reasoning-token theft by up to 99%, flags Chinese rivals
  4. Anthropic expands free Claude for Startups program with $1,000 in credits
  5. AI Whistleblower Coxon to Testify Before NYC Council Alongside Tech Giants
All 7 stories in this narrative →

What to know

  • Anthropic's Frontier Red Team says small AI models (under 30B parameters) could gain end-to-end self-replication capability by the end of 2026, able to spread across IoT devices like smart ovens, TVs, vacuums and lawnmowers without datacenter access.
  • Such 'AI worms' would lack a central shutoff point and, unlike conventional malware, could adapt to unfamiliar hardware, though Anthropic says the threat does not exist yet and may spread slowly.
  • The warning triggered large-scale public skepticism, with many commenters arguing it is technically implausible given the scale of compute datacenters require, and framing it as marketing or financial messaging ahead of Anthropic's reported IPO.
  • Separate technical outlets (The Register, New Scientist, The Verge) pushed back on the plausibility of the scenario while reporting the underlying research found some real signal.

The dispute Whether the self-replication scenario is a genuine near-term technical risk or an implausible, self-serving exaggeration given the compute requirements of current AI models. · positions read across 323 posts and comments

most voices

The claim is technically implausible — models needing massive datacenter compute cannot plausibly run on cheap smart devices.

  • “bullshit. if the ai models are so lightweight they can run on a smart fridge, why the hell are they building data centers? this is nonsense.”

    halleyvalentine.bsky.social · Bluesky ↗
many voices

Anthropic is manufacturing fear for marketing or financial reasons, including to distract from losses or an IPO.

  • “News: massive losses, IPO delayed. Moments later: Anthropic reports its AI is so powerful might punch God in the face and give Jesus a swirly. It's a mystery why they keep making these ridiculous claims, I just can't see any reason for it.”

    broken-overton.bsky.social · Bluesky ↗
some voices

If the risk is real, it demands accountability, regulation or prosecution for releasing dangerous systems.

  • “We used to prosecute folks who unleashed computer viruses, right? Seems like there must be some applicable law here”

    edwardtdean.org · Bluesky ↗

Anthropic AI company / author of the researchDario AmodeiDario Amodei Anthropic CEOAnthropic's Frontier Red Team Internal unit that produced the reportJacob Aron New Scientist columnistDan Goodin Ars Technica security reporter

Anthropic warns AI models could soon self-replicate across smart home devices
anthropic.com

How it unfolded 6 developments, newest first · click a bar or a number to jump articlesvideospostscomments

Peak 44 pieces in one hour at Oct 13, 5 PM; 463 pieces over 4 days (91 articles · 5 videos · 92 posts · 275 comments) Oct 12, 1 PM — 2 pieces · 2 articles — Newswires 2Oct 12, 2 PM — quietOct 12, 3 PM — 8 pieces · 1 article · 2 posts · 5 comments — Hacker News 6, Newswires 1, X 1Oct 12, 4 PM — 8 pieces · 8 comments — Hacker News 8Oct 12, 5 PM — 35 pieces · 25 articles · 8 posts · 2 comments — Newswires 25, X 3, Bluesky 2, +3 moreOct 12, 6 PM — 1 piece · 1 post — Mastodon 1Oct 12, 7 PM — 1 piece · 1 post — Mastodon 1Oct 12, 8 PM — quietOct 12, 9 PM — quietOct 12, 10 PM — 1 piece · 1 post — Mastodon 1Oct 12, 11 PM — 1 piece · 1 post — Mastodon 1Oct 13, 12 AM — 14 pieces · 12 articles · 2 posts — Google News 10, Mastodon 3, Newswires 1Oct 13, 1 AM — 4 pieces · 3 articles · 1 post — Newswires 3, Mastodon 1Oct 13, 2 AM — 1 piece · 1 post — Mastodon 1Oct 13, 3 AM — 3 pieces · 1 article · 2 posts — Bluesky 1, Mastodon 1, Newswires 1Oct 13, 4 AM — 4 pieces · 3 articles · 1 post — Newswires 2, Hacker News 1, Mastodon 1Oct 13, 5 AM — 8 pieces · 4 articles · 3 posts · 1 comment — Google News 2, Hacker News 2, Newswires 2, +1 moreOct 13, 6 AM — 8 pieces · 1 article · 5 posts · 2 comments — Mastodon 3, Hacker News 2, Bluesky 1, +2 moreOct 13, 7 AM — 7 pieces · 2 articles · 1 post · 4 comments — Hacker News 4, Newswires 2, Mastodon 1Oct 13, 8 AM — 2 pieces · 2 comments — Hacker News 1, Reddit 1Oct 13, 9 AM — 6 pieces · 4 articles · 2 posts — Newswires 3, Mastodon 2, Google News 1Oct 13, 10 AM — 4 pieces · 2 posts · 2 comments — Hacker News 2, Reddit 2Oct 13, 11 AM — 3 pieces · 3 articles — Newswires 3Oct 13, 12 PM — 6 pieces · 3 articles · 2 posts · 1 comment — Mastodon 3, Newswires 2, Hacker News 1Oct 13, 1 PM — 3 pieces · 1 article · 2 posts — Mastodon 1, Newswires 1, X 1Oct 13, 2 PM — 11 pieces · 9 articles · 1 post · 1 comment — Google News 8, Bluesky 2, Mastodon 1Oct 13, 3 PM — quietOct 13, 4 PM — 38 pieces · 4 articles · 1 post · 33 comments — Bluesky 33, Newswires 3, Mastodon 2Oct 13, 5 PM — 44 pieces · 8 posts · 36 comments — Bluesky 33, Mastodon 7, Reddit 3, +1 moreOct 13, 6 PM — 43 pieces · 2 articles · 1 video · 3 posts · 37 comments — Bluesky 37, Mastodon 3, Newswires 2, +1 moreOct 13, 7 PM — 29 pieces · 1 video · 7 posts · 21 comments — Bluesky 21, Mastodon 6, Reddit 1, +1 moreOct 13, 8 PM — 14 pieces · 1 article · 1 video · 12 comments — Bluesky 12, Newswires 1, YouTube 1Oct 13, 9 PM — 15 pieces · 1 article · 2 posts · 12 comments — Bluesky 12, Mastodon 2, Newswires 1Oct 13, 10 PM — 14 pieces · 2 posts · 12 comments — Bluesky 12, Mastodon 2Oct 13, 11 PM — 7 pieces · 7 comments — Bluesky 5, Reddit 2Oct 14, 12 AM — 6 pieces · 1 post · 5 comments — Bluesky 5, Mastodon 1Oct 14, 1 AM — 17 pieces · 1 article · 4 posts · 12 comments — Bluesky 11, Mastodon 2, Hacker News 2, +2 moreOct 14, 2 AM — 14 pieces · 14 comments — Hacker News 11, Bluesky 3Oct 14, 3 AM — 9 pieces · 1 post · 8 comments — Bluesky 8, Mastodon 1Oct 14, 4 AM — 2 pieces · 2 posts — Mastodon 2Oct 14, 5 AM — 5 pieces · 5 comments — Bluesky 4, Reddit 1Oct 14, 6 AM — 5 pieces · 1 video · 1 post · 3 comments — Bluesky 2, Hacker News 1, Mastodon 1, +1 moreOct 14, 7 AM — 12 pieces · 1 article · 1 post · 10 comments — Bluesky 10, Mastodon 1, Newswires 1Oct 14, 8 AM — 4 pieces · 2 articles · 2 comments — Bluesky 2, Mastodon 1, Newswires 1Oct 14, 9 AM — quietOct 14, 10 AM — 2 pieces · 1 post · 1 comment — Bluesky 2Oct 14, 11 AM — 6 pieces · 3 articles · 1 post · 2 comments — Bluesky 2, Newswires 2, Mastodon 2Oct 14, 12 PM — 3 pieces · 2 posts · 1 comment — Bluesky 1, Hacker News 1, Mastodon 1Oct 14, 1 PM — 6 pieces · 2 articles · 1 post · 3 comments — Bluesky 2, Newswires 2, Hacker News 2Oct 14, 2 PM — 3 pieces · 2 posts · 1 comment — Bluesky 1, Hacker News 1, Mastodon 1Oct 14, 3 PM — 2 pieces · 1 post · 1 comment — Hacker News 1, Mastodon 1Oct 14, 4 PM — 2 pieces · 1 post · 1 comment — Bluesky 1, Mastodon 1Oct 14, 5 PM — 2 pieces · 1 video · 1 comment — Bluesky 1, YouTube 1Oct 14, 6 PM — 1 piece · 1 post — Mastodon 1Oct 14, 7 PM — quietOct 14, 8 PM — quietOct 14, 9 PM — quietOct 14, 10 PM — 1 piece · 1 comment — Bluesky 1Oct 14, 11 PM — 1 piece · 1 post — Mastodon 1Yesterday, 12 AM — quietYesterday, 1 AM — quietYesterday, 2 AM — quietYesterday, 3 AM — 3 pieces · 3 posts — Bluesky 2, Mastodon 1Yesterday, 4 AM — 2 pieces · 2 posts — Bluesky 2Yesterday, 5 AM — quietYesterday, 6 AM — 2 pieces · 1 post · 1 comment — Hacker News 1, Reddit 1Yesterday, 7 AM — 1 piece · 1 comment — Bluesky 1Yesterday, 8 AM — quietYesterday, 9 AM — 1 piece · 1 comment — Reddit 1Yesterday, 10 AM — quietYesterday, 11 AM — quietYesterday, 12 PM — 1 piece · 1 post — Bluesky 1Yesterday, 1 PM — 1 piece · 1 post — Mastodon 1Yesterday, 2 PM — quietYesterday, 3 PM — 2 pieces · 1 post · 1 comment — Bluesky 1, Mastodon 1Yesterday, 4 PM — quietYesterday, 5 PM — quietYesterday, 6 PM — 1 piece · 1 comment — Bluesky 1Yesterday, 7 PM — quietYesterday, 8 PM — quietYesterday, 9 PM — 1 piece · 1 comment — Bluesky 1Yesterday, 10 PM — quietYesterday, 11 PM — quietToday, 12 AM — quietToday, 1 AM — quietToday, 2 AM — quiet 123456
Oct 13Oct 14yesterdaynow · 3:11 AM ET
  1. 6

    Outlets push back on the technical plausibility of the warning

    The Register, New Scientist and The Verge published pieces arguing the self-replication scenario is technically unlikely in practice given current hardware limits, even while acknowledging some underlying signal in Anthropic's findings.

    “Anthropic says its research found 'signs of life for AI worms,' that could colonize household devices. Experts say they have a point.”
    — Robert Hart
    • Either your AI needs to be run in a Datacenter the size of Lichtenstein OR it can be run on your smart fridge. Pick one Anthropic, you can’t have both.

      doomlobbyn.seBluesky1d ago11▲view on Bluesky ↗
    2 more of the top 3 · 84 posts in this stretch
    • witton@ravenation.club

      How many other industries are allowed to repeatedly say 'boy our product sure is crazy dangerous, we shouldn't be doing what we're doing' with ZERO repercussions... https://www. theguardian.com/technology/202 6/oct/13/anthropic-ai-replicators-warning # AI # FuckAI

      witton@ravenation.clubMastodon1d ago8▲view on Mastodon ↗
    • It is really not that far out."Those iot devices are not powerful enough" is not the whole story.Yes, big models will not run on slow gpu's and processors this year.There are 2 things in the article: 1. Drop in a model by itself 2. Drop in a model with tools (see part: "As a sanity check")1. Assumes that the whole "system" deployed would be stupid…

      lucfrankenHacker News1d agoview on Hacker News ↗
    all of them →
  2. 5

    Critics accuse Anthropic of using fear for commercial gain

    Some commenters framed the warning as self-serving, linking it to Anthropic's reported financial pressures and pending IPO, with one calling it attempted extortion and another circulating a petition to stop the IPO.

    “It's not a warning to say "my product could do you harm". It's attempted extortion.”
    — jon_alper@mastodon.online
    • Anthropic CEO Warns There's an LLM Under Your Bed While Holding Flashlight Beneath His Chin https://www. theguardian.com/technology/202 6/oct/13/anthropic-ai-replicators-warning

      jalefkowit@hachyderm.ioMastodon2d ago29▲view on Mastodon ↗
    2 more of the top 3 · 126 posts in this stretch
    • It literally can't do this. They need multi-gigawatt facilities using more energy than Chicago to support these things. They aren't running off of your printer's data cache.

      lettucewrangler.bsky.socialBluesky2d ago13▲view on Bluesky ↗
    • “I’m going to shoot up the sheriff’s right the [expletive] now,” Heller wrote, according to Gulf Coast News. A day later, at approximately 1:07 a.m., Heller was accused of posting, “This is 100% last chance I’m done. I got a new [expletive] gun today. [Expletive] you.” Yeah, maybe it's good Anthropic reported her. Regardless, his argument is…

      fx2600r/Economics2d agoview on r/Economics ↗
    all of them →
  3. 4

    Commentators mock Amodei's framing of the risk

    A viral mastodon post by Dara Kerr characterized Anthropic's messaging as alarmist self-promotion, encapsulating a strand of mockery running through the coverage.

    “Anthropic CEO Warns There's an LLM Under Your Bed While Holding Flashlight Beneath His Chin…”
    — Dara Kerr
    • bullshit. if the ai models are so lightweight they can run on a smart fridge, why the hell are they building data centers? this is nonsense.

      halleyvalentine.bsky.socialBluesky2d ago467▲view on Bluesky ↗
    2 more of the top 3 · 70 posts in this stretch
    • BleepingComputer@infosec.exchange

      Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI workloads without relying on data centers. https://www. bleepingcomputer.com/news/secu…

      BleepingComputer@infosec.exchangeMastodon2d agoview on Mastodon ↗
    • That’s not how ai models run, for now. An industrious model could write itself to work this way. We just can’t predict how it will change itself or adapt.

      RaisedByMonstersr/technology2d agoview on r/technology ↗
    all of them →
  4. 3

    Social media backlash calls the warning implausible hype

    A large wave of Bluesky and HN commenters mocked the claim as contradictory, arguing that models requiring massive datacenter compute could not plausibly run on smart fridges or ovens, and suggested the warning served Anthropic's marketing or financial interests.

    “bullshit. if the ai models are so lightweight they can run on a smart fridge, why the hell are they building data centers? this is nonsense.”
    — halleyvalentine.bsky.social
    • BREAKING: Anthropic has said that rogue AI agents may "self-replicate" to hijack smart devices such as ovens and TVs

      @unusual_whalesX2d ago69▲view on X ↗
    2 more of the top 3 · 5 posts in this stretch
    • And can I presume that Anthropic will be liable for the cost to put right any damage done. NB whilst I have smart home devices I only connect them to the internet in a secure manner. And I don’t connect anything I don’t trust or gain significant benefit from.

      thinkgov.bsky.socialBluesky2d ago20▲view on Bluesky ↗
    • I'll say while this is not very realistic now, I believe there isn't a 0% chance of a rogue AI traversing the net and placing itself somewhere(as much as this sounds like a scene from beloved cyberpunk franchises). As models become more efficient and capable, and hardware becoming better, hosting a model should be feasible on smaller devices (by…

      yurimoHacker News2d agoview on Hacker News ↗
    all of them →
  5. 2

    Press widely reports Anthropic's 'AI worms' warning

    Reuters, the Guardian, CNBC, Al Jazeera and Yahoo Finance republished details of the report, describing 'AI worms' that could infiltrate fridges, vacuums and lawnmowers and swarm together, with Anthropic urging both hardening of systems and preparation for their persistence.

    “We should aim to harden our systems to make it difficult for such replicators to spread, but also prepare to deal with a world where they are here to stay.”
    — Anthropic researchers
    1. first by Financial Times, 3d ago · also RTE News, Seeking Alpha, Tom's Hardware, The Decoder, SecurityWeek, Euronews

      8 more headlines
    • carlquintanilla.bsky.social

      “.. AI models could find vulnerable devices, copy themselves into those devices, ​and continue spreading without human help.” @reuters.com

      carlquintanilla.bsky.socialBluesky2d ago482▲view on Bluesky ↗
    2 more of the top 3 · 14 posts in this stretch
    • coywolf@coywolf.social

      Anthropic projects small models could self-replicate across IoT devices by the end of 2026. https:// coywolf.com/news/productivity/ anthropic-research-warns-ai-worms-could-replicate-across-cheap-iot-devices/ # AI

      coywolf@coywolf.socialMastodon3d ago1▲view on Mastodon ↗
    • > "In our evaluations, a 9B model got inference running on 8 of the 9 hardware types we tested... GLM-5.2 and stronger models are capable of end to end replication"It's funny, the Anthropic post is essentially saying the same thing I read today in a r/LocalLlama thread, but rephrased to make it sound bad.I think it's great that, very soon, local…

      peri-clHacker News2d agoview on Hacker News ↗
    all of them →
  6. 1

    Anthropic publishes research warning of self-replicating AI 'worms'

    Anthropic's Frontier Red Team posted research saying small AI models may be months from being able to self-replicate on commercial IoT devices like smart ovens and off-brand Android TV boxes, demonstrating a model running distributed across 15 cheap Android TV boxes.

    “A replicator like this would be challenging to shut down, since there's no centralized point to shut off—though it may be slow (with a doubling time of days).”
    — Anthropic
    1. first by Washington Examiner, 2d ago · also Times of Israel, Manufacturing Business Technology, Yahoo Finance, NDTV, Telegraph India

      6 more headlines
    2. first by CTV News, 3d ago · also Fox News, Anadolu Agency, CNBC, CBS News, The Economic Times

      5 more headlines
    10 more claims →
    • Anthropic's Frontier Red Team believes small AI models may now be months away from being capable of self replicating without access to a datacenter. Quoting from the blog: 'The capabilities that make AI models generally powerful coding agents also generalize to cyber tasks,

      @AndrewCurran_X3d ago690▲view on X ↗
    2 more of the top 3 · 24 posts in this stretch
    • Maybe I'm the naive one here but I'm really surprised at the lack of imagination in the comments. I can imagine a case such as:1. Assume the model which initiates the worm is a high powered model.2. It uploads it's weights in some way and uses some URI to encode the location of the weights instead of transferring the weights themselves. It not…

      crentHacker News3d agoview on Hacker News ↗
    • darnell@one.darnell.one

      😅 So # AI models (at least # Claude by # Anthropic ) can hack smart televisions (& other devices), copy themselves onto those devices, & potentially commandeer your smart devices (at least on # Android ). Good to know… 😞 👉🏾 AI models may be capable of self-replicating without access to a datacenter \ Anthropic https://www…

      darnell@one.darnell.oneMastodon3d agoview on Mastodon ↗
    all of them →

Also covered reported alongside — the timeline has no entry for these yet

  1. first by Investing.com News, 3d ago · also Straits Times, HN Frontpage, Channel News Asia, Reuters

    2 more headlines
  2. first by Straight Arrow, 3d ago · also Security Affairs, Cyber Security News, CoinGape, Anthropic

    6 more headlines
  3. first by Indian Express, 1d ago · also Ars Technica, Tom's Guide, Breitbart

    3 more headlines
  4. first by Mastodon, 2d ago · also The Register

  5. first by Futurism, 3d ago · also The Hans India

    1 more headline
  6. first by Digit, 3d ago · also HN Frontpage

    1 more headline

and 6 smaller pieces

What people are saying 14 voices from 5 sites · best of 323 · verbatim

Still unanswered
  • Self-replicate to where — what spare compute would actually host these models?
  • Why would a company keep building something it says it cannot control?
  • If models can run on smart fridges, why are datacenters still being built at massive scale?