Anthropic warns small models may be months from self-replicating across smart devices

CNBC reports the research shows that capable small models no longer need data-center hardware. Distributed across cheap, poorly secured consumer devices, they could theoretically persist and spread like a botnet. The experiment used commodity Android TV boxes, which often ship with weak security, as the substrate.

The concern is that frontier safety controls such as API monitoring and kill switches do not apply to open-weight models running on hijacked hardware. As open models grow more capable at smaller sizes, the threat model shifts toward device security and network defense.

Skeptics pushed back. Critics said the 'experiment was engineered to succeed' by deliberately using unauthenticated access, and noted that no fully autonomous rogue replicator was demonstrated. r/Anthropic joked 'your smart-fridge may go rogue'. Another viral thread, separately, discussed reported Houthi misuse of Claude.

The disclosure lands as the EU begins AI Act information requests to Anthropic. Watch for whether device makers or regulators respond, and for independent replication.