Serio sees a possible future threat but says no real-world AI worm was demonstrated
Giuseppe SerioUpstream Security vice president of market development, interviewed by Tom's Guide
Serio says AI does not bypass security on its own, that Anthropic's experiments were slow and simplified, and that no real-world AI worm has been demonstrated.
“Of course, AI doesn't magically bypass security. An attacker still needs a way into the device, whether through a vulnerability, exposed interface or weak security configuration. Anthropic's research is still experimental. The models were slow, required considerable resources and were tested under simplified conditions. So we are not yet looking at a demonstrated real-world AI worm spreading across devices.”
Interview

Where this statement fits
Anthropic says small AI models may be months from being able to self-replicate on smart devices; critics question its experiments
Anthropic researchers say their experiments suggest small AI models may be months away from being capable enough to self-replicate on commercial internet-connected devices such as smart ovens and Android TV boxes. Critics, including Gregory Kurtzer and Ravid Shwartz-Ziv, say the tests were simplified and do not show self-replication.
Source and context
Interview
About this source
Elton Jones interviews Upstream vice president Giuseppe Serio. Serio distinguishes experimental results from a real-world worm and from control over safety-critical functions.
Archived copy (opens in a new tab)Before the quotation
Jones asks whether AI worms could make connected devices a new security threat. Serio says the concept could become a real risk.
After the quotation
He adds that the direction matters because attackers could automate more of the work that once required human expertise.
How this statement is classified
The label describes this statement's response within the context above.
Why this label?
The matter under scrutiny is Anthropic's self-replication forecast and its framing of the experiments as a security warning. Serio supports the longer-term concern conditionally but limits what the present experiments establish.
- Recorded on
- Published here
More from this case
Read the full caseTissera says the headline combines distinct experiments into one claim
“The research is technically interesting. But the headline combines three different models, two separate experiments, a seeded foothold and a network of unauthenticated computers into one story about “self-replicating AI.””Read statement
Guerrero-Saade calls the AI-worm scenario unrealistic threat framing
“An IoT botnet running a distributed model at sub 10-tokens per second is not representative of any realistic concern. It’s fodder to substantiate some bizarre narrative of self-replication from a sci-fi threat model and we don’t think it’s cute.”Read statement
Graham defends publishing early research on advanced AI risks
“We've been publishing our early-glimpse risk research for years.”Read statement
Share or embed this statement
The embed keeps its attribution link to The Dispute Index. Credit the image to The Dispute Index and link to the statement page.
Cite this record
- Publisher
- The Dispute Index
- Title
- Serio sees a possible future threat but says no real-world AI worm was demonstrated
- First published
- Last updated
- Permalink
- https://disputeindex.com/events/6692-serio-says-ai-does-not-bypass-security-on
Last updated marks the most recent saved version of this published statement.
The Dispute Index. "Serio sees a possible future threat but says no real-world AI worm was demonstrated". First published: 2026-10-24. Last updated: 2026-10-24. https://disputeindex.com/events/6692-serio-says-ai-does-not-bypass-security-on