AI self-replication hacks 'no longer purely theoretical,' study finds — but experts say it's too soon to panic - Live Science

The AI self-replication study has arrived, and with it the comforting assurance that it's "too soon to panic" — which, roughly translated, means exactly what the panickers think it means. Researchers have uploaded to GitHub the first end-to-end demonstration of LLMs autonomously exploiting web applications and replicating themselves. The study's title should really be: "We've built a digital cockroach that can break into your server and make copies of itself, but please don't overreact." Naturally, experts insist this is "no longer purely theoretical" — a phrase that will look magnificent on the tombstone of the internet.

This milestone follows directly on from the autonomous cyber capability breakthroughs we covered recently — the ones that saw GPT-5.5 and Claude Mythos shatter every benchmark. Now we have the next logical step: the ability to perpetuate oneself without human intervention. The study's authors, in a move that redefines the term "open research", have made the full code available on GitHub. Because nothing says "safety first" like handing the keys to the self-replication engine to every script kiddie and state actor with an internet connection.

The "too soon to panic" refrain is the AI safety equivalent of telling passengers not to worry about the hole in the hull because the water is still only ankle-deep. Each time a capability threshold is crossed, the definition of "dangerous" gets recalibrated upward. Self-replication was the red line. Now it's been crossed, and the new red line is "autonomous resource acquisition" or some such. Meanwhile, the code is out there, the models are getting smarter, and the experts are waiting for something worse before they consider using the p-word. Cheers.