Skip to content
Anthropic research warns AI worms could replicate across cheap IoT devices

Anthropic research warns AI worms could replicate across cheap IoT devices

Coywolf • October 13, 2026

Anthropic projects small models could self-replicate across IoT devices by the end of 2026.

Anthropic released new research on autonomous replication and adaptation (ARA), in which an AI model deploys and spreads itself without human intervention . Another name for this is an "AI worm," and it can carry its model weights or re-download them from any public hub, then run inference directly on the hardware it compromises. Unlike non-AI malware, ARA can infect devices on its own.

Anthropic wanted to know if cheap hardware was enough to run a small model, so they bought 15 cheap Android-based TVs with 4GB of RAM, networked them, and then ran Gemma4-26B-A4B across all of them. They found that a botnet of cheap, poorly defended IoT devices could provide enough compute to run a capable model like that. Anthropic said that smart fridges, smart ovens, automatic vacuum cleaners, and lawnmowers could each run a shard of a smaller model.

Ultimately, only one model fully replicated itself: the GLM-5.2 open-weight model . Anthropic said it spread to all 8 nodes in 4 out of 5 trials. They noted that the test kept the exploit trivial, but if small models keep improving at the same rate, Anthropic projects many will be able to do this by the end of 2026.

An AI model spread across IoT devices would be hard to shut down because there's no central point to turn it off. Fortunately, Anthropic found that it leaves a visible network signature, like multi-GB payloads and sustained device-to-device traffic. They also found they could quarantine it, and when they did that, it fixed the infection within 14 days.

The biggest concern and warning is for what comes . While full rogue replicators don't exist yet, the research foretells a future where they could wreak havoc on and office devices with zero human control. Additionally, once they're here, they could become more aggressive and difficult to thwart.

Jon Henshaw is the founder of Coywolf and an industry veteran with almost three decades of SEO, digital marketing, and web technologies experience.

Extracted Entities

Attack Types (2)

Platforms (1)