Science fiction trained us to expect a rogue AI in a giant underground data center. Anthropic's researchers now say the more realistic setting may be your smart TV, your oven, or that lawnmower with Wi-Fi you never got around to updating.
Months Away From Self-Copying AI
In a report released Monday, Anthropic researchers warned that small AI models "may be months away from being capable enough" to copy themselves onto internet-of-things devices in homes and small businesses. The company's frontier red team tested multiple models developed in the US and China.
The good news is that no model tested was both powerful enough and small enough to reliably replicate itself on something like a smart TV. The less good news is that the researchers expect such a model by the end of 2026. They also noted that self-replicating AI would be "challenging to shut down," because it wouldn't depend on any central host.
Old Malware Followed a Script. This Kind Improvises.
Why start with smart appliances? Because they're connected to the internet and, as the researchers point out, have historically had minimal security. Default passwords and firmware from 2019 make them easy targets. An outside academic quoted by Al Jazeera added that an AI worm could "reason about unfamiliar devices" and "adapt when its approach fails," which traditional malware can't do.
The part most people will miss is that this isn't really a story about fridges. It's about neglected, unpatched, internet-facing systems, and every small business has some. The forgotten staging site, the plugin nobody has updated since the intern left, and the admin panel with a shared login all fit the same description. A worm that can improvise will find those just as easily as a forgotten smart TV.
The good habits haven't changed: patch everything, retire what you don't use, and don't trust default settings. What's changed is how much it costs you to skip them.
If you can't remember the last time someone audited what your website exposes to the internet, let our team take a look before something smarter than a script kiddie does.
Source: Al Jazeera