Anthropic red team demonstrates mini AI worm: still slow, still dumb, but lurking on devices nobody has defended

Anthropic's frontier red team published a research report on October 12, stating that AI models may be able to self-replicate without access to data centers, and actually built a mini AI worm that can spread across edge devices. The report states that Qwen3.5-9B successfully set up inference services on 8 of the 9 hardware types tested; in a firewall-isolated VPC, only GLM-5.2 completed end-to-end replication, covering 8/8 nodes in 4 out of 5 rounds, while the other models consistently failed. The research breaks autonomous replication into four steps, identifies inference setup as the bottleneck, and proposes a capability floor and size ceiling framework. Extrapolating from the 13.7 ECI annual growth rate of open-source models under 30B, the trend line crosses the floor by the end of 2026. The report also states that a 9B worm takes 1 to 2 days to replicate one generation, can Lamarckian-style pass troubleshooting notes to the next generation, with success rates rising from 45% in the first generation to 61% to 84% in subsequent generations, and argues for suppressing the basic reproduction number R0 below 1 as a defense.