Most people think about cybersecurity in terms of laptops, phones, and office computers. But the inexpensive streaming box behind a television is also a computer, and some of these devices receive weak security support long after they connect to a home network.
That is the concern behind new research from Anthropic. Its security researchers investigated whether relatively small AI models could help malicious software discover unfamiliar devices, establish the software needed to run a model, and spread to other machines.
The crucial point is that Anthropic has not announced a real-world, unstoppable AI worm. Its October 12 research demonstrates important pieces of the problem in experiments, including a test network where replication succeeded under simplified conditions. The company says the gap between those results and a practical, fully autonomous replicator remains significant.
The emerging concern is not a self-aware television, but malware that could use AI to adapt and spread across poorly secured connected devices.
Figures come from Anthropic's October 12 research. The replication trials used a simplified cyber environment, not an uncontrolled network of household devices.
What Is an AI Worm, and How Is It Different From Malware?
A computer worm is malware that can spread from one system to another without requiring a person to manually copy and run it on every machine. Traditional worms often rely on known vulnerabilities, weak passwords, or exposed services.
An AI-enabled worm could add a different capability: using a model to reason through unfamiliar technical environments, adapt its approach, and automate more of the steps needed to propagate. The AI would not need consciousness or its own intentions; it would be software executing an assigned malicious objective.
Anthropic's research examines a particularly difficult scenario: a model that carries its own model weights and tools to another device, starts running there, and repeats the process. In theory, a distributed collection of inexpensive devices could supply enough combined computing resources to keep a relatively small model running.
What Anthropic's 15 Smart TV Boxes Actually Proved
In the first experiment, Anthropic ran Google's Gemma 4 26B-A4B model across 15 inexpensive Android TV boxes, each with 4GB of RAM. The researchers split the model across the devices so that each box handled only a portion of the model's layers.
This matters because a model that does not fit comfortably on one low-cost device may still run when its workload is distributed across several machines. But this experiment demonstrated distributed AI inference, not a worm autonomously infecting 15 televisions in homes.
The second experiment addressed the replication problem directly. Anthropic created a firewalled Google Cloud network of eight Android 15 emulator nodes, with the initial node seeded with the test program.
The tested agent could attempt to discover another node, access it, transfer the payload, establish an inference server, and continue to another target. Among the open-weight models tested, GLM-5.2 achieved full end-to-end replication in this simplified setup, reaching all eight nodes in four of five trials.
Why Small AI Models Could Change the Threat
Anthropic's concern is about two requirements that do not yet fully overlap: the model must be capable enough to manage the replication process, but small enough to run on the low-resource devices it might compromise.
In its October 12 paper, the company estimated that if model capabilities continue improving at their historical rate, a small model might reach the required capability level by the end of 2026. This is a projection based on a capability-index trend, not a confirmed date for a working real-world AI worm.
The research also suggests that replication could be slow. Anthropic estimates that a model around 9 billion parameters could take days to reproduce under its low-cost hardware scenario, rather than spreading instantly like a cinematic computer virus.
Speed is not the only concern. A distributed threat could be difficult to eradicate if different devices host different parts of its workload, and there is no single central server that defenders can switch off. However, spreading still creates network traffic, payload transfers, and other detectable activity.
Is This a New Cybersecurity Crisis?
The most balanced assessment is that AI-assisted cyberattacks are a credible security concern, while a fully autonomous, self-replicating AI worm remains an emerging possibility rather than a demonstrated widespread threat.
In its October 13 report, Reuters quoted both experts who supported investigating the risk and skeptics who saw signs of overstatement in the way it was presented. The Guardian similarly reported that some researchers considered the current worm slow and its practical impact limited.
There is already evidence that vulnerable connected devices can be abused without AI self-replication. In June 2025, the FBI warned about BADBOX 2.0, a botnet involving compromised consumer devices such as TV streaming boxes, digital projectors, and other connected products.
That history is important because the immediate security problem is not hypothetical: weak credentials, unofficial software, poor device support, and malware installed before purchase can all create opportunities for criminals today.
How to Protect Your Smart TV and IoT Devices
You do not need to panic or disconnect every smart device in your home. The best response is to reduce the opportunities attackers already use and make it harder for a compromised device to reach your computers or sensitive accounts.
Five Security Steps Worth Taking Now
- Update firmware: Install security updates for your router, television, streaming box, cameras, and smart-home equipment. Replace devices that no longer receive security support.
- Avoid suspicious streaming boxes: Be wary of unknown brands promising unlimited paid channels for free, or devices that ask you to disable built-in security protections.
- Use a separate IoT network: If your router supports guest-network isolation or a dedicated IoT network, separate smart devices from computers containing important files.
- Secure administration: Change default passwords, disable unnecessary remote administration and debugging features, and use multifactor authentication for important accounts where available.
- Watch for unusual behavior: Unexplained network activity, unknown apps, or devices that behave unexpectedly deserve investigation. Disconnect a suspicious device from the network while you seek help.
The FBI's BADBOX 2.0 guidance specifically warns against unofficial app marketplaces, devices without Google Play Protect certification, and requests to disable Play Protect.
Network separation is particularly useful because a smart TV usually does not need unrestricted access to your work laptop, personal documents, or every other device in your home. It cannot prevent every compromise, but it can limit what a compromised device can reach.
An Overlooked Router Setting
A guest Wi-Fi network is only helpful for isolation if your router actually prevents connected guests from reaching your main devices. Check the router manual for guest isolation or IoT network controls, and test that smart devices cannot access computers on your primary network. The label alone is not a guarantee of separation.
Looking for a Router With IoT Network Controls?
If your current router lacks guest-network isolation, look for a model whose documentation explicitly explains how to separate smart-home devices from your computers and phones. Check the supported network controls, update policy, and administration features before buying; a new router is not necessary if your existing one already provides suitable isolation.
Compare Routers on AmazonWhat Happens Next?
Anthropic says there are still technical obstacles between its demonstrations and an effective, compact, real-world replicator. The research is best read as a warning about a capability gap that may narrow, not proof that a large autonomous AI worm is currently spreading through homes.
The next meaningful evidence would be independent testing that measures whether a sufficiently small model can complete the entire replication process on real, properly secured devices, under realistic network conditions. It would also need to show how quickly it spreads and whether established monitoring and containment methods can stop it.
For now, the lesson is straightforward: AI can change the speed and flexibility of cyber operations, but many defenses remain familiar. Secure defaults, supported firmware, restricted network access, and monitoring are still among the most practical ways to reduce risk.
“Security is a process, not a product.”
— Bruce Schneier, in his essay The Process of Security.
The quote is more relevant than ever: buying a security product is not a substitute for maintaining devices, reviewing access, and responding to new vulnerabilities over time.
Watch: How IoT Botnets Work
This USENIX Security Symposium presentation explains the Mirai botnet, a real example of how vulnerable internet-connected devices were recruited into a large malicious network. It predates Anthropic's AI-worm research and is included as background on the existing IoT security problem, not as evidence of an AI worm.
Video: “Understanding the Mirai Botnet,” USENIX Security Symposium. The research examined real-world IoT botnet growth and provides historical context for today's concerns.
Stay Ahead of Global AI Regulations
As AI models become more powerful, governments are cracking down with strict new data privacy laws, copyright rulings, and enterprise deployment frameworks. Track the latest legal shifts in our AI Regulation News hub to understand exactly how these compliance changes impact your business, your development pipeline, and the tools you use every day.
Read the Latest AI Regulation News →Sources checked for this article:
Anthropic: AI Models May Be Capable of Self-Replicating Without Access to a Datacenter — original research, demonstrations, limitations, and mitigations.
The Guardian: What Are Self-Replicating AI Worms, and Why Is Anthropic Worried? — expert reactions and context around the reported risk.
Reuters: Anthropic Warns AI Models May Soon Self-Replicate — independent reporting and contrasting expert assessments.
FBI: Home Internet-Connected Devices Facilitate Criminal Activity — practical guidance about compromised streaming boxes and IoT devices.
CISA: Internet Exposure Reduction Guidance — default credentials, patching, monitoring, and reducing exposed services.
Bruce Schneier: The Process of Security — source for the quotation in this article.
USENIX: Understanding the Mirai Botnet — research and presentation on real-world IoT botnets.
Frequently Asked Questions About AI Worms
What is an AI worm?
An AI worm is a proposed form of malware that uses AI capabilities to automate or adapt parts of its spread from one device to another. The concern is that it could reason through unfamiliar hardware or software environments rather than rely entirely on a fixed set of instructions.
Did Anthropic prove that an AI worm is spreading through smart TVs?
No. Anthropic ran a model across 15 Android TV boxes in one experiment and tested replication in a separate, contained Android-emulator network. Its researchers explicitly state that they do not yet have a complete rogue replicator operating in the wild.
Why did Anthropic use 15 Android TV boxes?
The researchers wanted to show that low-cost devices with limited memory could collectively run AI inference by splitting a model across several machines. This demonstrated distributed computing feasibility, not a real-world infection of 15 household televisions.
Can an AI worm infect my smart TV today?
Anthropic's research does not establish that a fully autonomous AI worm is currently infecting ordinary smart TVs. However, connected devices already face conventional malware risks, particularly when they have weak credentials, outdated firmware, unofficial software, or poor security support.
How can I protect my smart-home devices from AI-related cyber threats?
Keep device firmware updated, replace unsupported products, avoid suspicious streaming boxes and unofficial app marketplaces, change default passwords, disable unnecessary remote administration, and isolate smart devices from computers containing sensitive data when your router supports it.
No comments:
Post a Comment