Self-replicating small models on IoT devices: security implications

A research note from the Cloud Security Alliance analyzes the evaluation released by Anthropic Frontier Red Team on October 12, which states that small models of about 30 billion parameters and below can already complete most individual steps of self-replication onto consumer-grade IoT hardware, but still make errors when chaining these steps together. The evaluation breaks replication into four stages—network enumeration, initial access and payload delivery, inference environment setup, and propagation—with a focus on testing inference environment setup. Test hardware included Android TV boxes with about 4 GB of RAM costing about $55. Only GLM-5.2 (about 30B) achieved end-to-end replication in the simplified evaluation, infecting 8 of 8 nodes in four of five trials; Qwen3.5 9B completed inference environment setup on 8 of 9 hardware categories, with a 45% first-attempt success rate. The authors expect that if small models continue to improve at historical rates, they could reach this capability level by the end of 2026.