The AI Bird-Flu Scenario They Just Published

Guest Post by Unshadowed

UPDATE: A video walkthrough of this report is available here.


https%3A%2F%2Fsubstack-post-media.s3.amazonaws.com%2Fpublic%2Fimages%2Fd911bd22-9c46-4021-82dc-7fc33e16c45c_1168x784.jpeg


A month ago, Elizabeth Sherwood-Randall laid out a scenario in Foreign Affairs. She is not a science fiction author. She was White House Homeland Security Adviser from 2021 to 2025. She coordinated the response to the 2024 H5N1 (Bird Flu) outbreak in US dairy.

She wrote:

In the foreseeable future, a terrorist group with minimal skills could access a jailbroken AI model… The group could use the model to design a new strain of H5N1 avian influenza that is more lethal and more easily spread from animals to humans than existing strains. Connecting remotely to one of the new generation of fully equipped, contract-for-service “cloud” labs, it could anonymously arrange for the virus to be built and tested and then sent to a biomanufacturing facility to be produced at scale. From there, the group could stealthily disperse the new strain through air-handling systems at major livestock farms across the United States.

Before long, the American poultry, beef, and dairy industries would suffer massive losses. When the virus inevitably jumped to the human population, it would cause severe illness and could result in hundreds of thousands or even millions of deaths.

The response from U.S. public and private institutions—lacking both an integrated strategy and adequate tools—would be too slow, too uncoordinated, too underresourced, and too overwhelmed to stop the spread and mitigate the consequences. And soon, the virus would also cross borders, triggering food insecurity, widespread sickness, and mass casualties around the world.

Foreign Affairs, 18-Aug 2026 (archive without paywall)


That same day, the Belfer report she co-authored, Deterrence by Resilience, made policy recommendations responding to this, including restricting unlicensed models (AI) and unscreened print shops (biomanufacturing).

The scenario may not be that imaginative.

On 10 September 2026, Anthropic published Detecting and Countering Misuse of AI, documenting cases of people using Claude to help with questionable purposes, from assembling weaponized drones to performing gain-of-function work on H5:

Here, we present five case studies of actors using our models in ways that could support biological weapons development… In the second, a researcher in an unsupported region spent weeks planning avian influenza mammalian-adaptation experiments with Claude, but classifiers confined the work to our weakest models…

The plan involved genetic-engineering approaches aimed at introducing mutations associated with mammalian adaptation and airborne transmissibility in animal models.

Anthropic, Detecting and countering misuse of AI: September 2026

They were careful to add a caveat—in the preamble, no less:

The individuals implicated in these case studies are working scientists. We do not assert that they intended harm.

Sherwood-Randall is not the first to imagine such a crisis:

  • February 2024 (Munich Security Conference): CEPI hosts a tabletop exercise entitled “Fighting ‘Smart’ Pandemics” wherein a group of senior people from health, security, and tech were presented with a scenario wherein a pathogen that appears zoonotic spreads rapidly around the world. An anarchist cell then claims they made it with AI.
  • February 2025 (Munich Security Conference): NTI hosts a tabletop exercise entitled “Safeguarding Against Global Catastrophe”. The panel is presented with “A global pandemic that eventually results in more than 850 million cases and 60 million deaths begins, sparked by a novel enterovirus strain that was intentionally engineered by an extremist group using artificial intelligence–enabled capabilities to engineer living systems (referred to as AIxBio capabilities)”
  • April 2026: RAND hosts a tabletop exercise 10 times, in which participants faced “a global pandemic triggered by students’ accidental release of an AI-engineered virus.”

The scenarios differed slightly across these exercises, but the policy recommendations mirrored those in the Belfer report: limit access to the technology that can design (AI) and print (biomanufacturing) a pathogen, and create biosurveillance to flag an outbreak as engineered.

Companies like Twist Bioscience and Integrated DNA Technologies, among others, accept a customer’s description of a gene sequence and synthesize it. Both claim to screen the customer and the sequence before shipping an order of DNA, checking each gene against a database of pathogens.

There are also benchtop DNA synthesizers available for a mere $300,000 that can print short DNA without going through a screened vendor.

That DNA can then be submitted to a cloud lab like Emerald Cloud Lab which will build and test a working sample.

Once tested, that sample can be sent to a biomanufacturing facility to be created at scale.

This is both why Sherwood-Randall’s catastrophic dairy/beef/poultry shock is plausible, and how it would set the stage for regulation of both compute and these bio-manufacturing capabilities.

The surveillance layer for an H5 shock in US livestock is already built — and well-funded:

  • The USDA National Milk Testing Strategy (NMTS) includes using PCR tests for H5 on milk from US dairies.
    Ginkgo Bioworks (whose board was until recently chaired by Palantir’s CTO) proposed including H5 tests in the existing tests for commercial milk:

The U.S.D.A.’s program to test bulk milk began in December — nearly a year after the outbreak began — and still does not include Idaho. Engaging outside companies may help the program move faster.  Ginkgo Bioworks, a company that worked with federal agencies during the Covid pandemic, already works with a partner that assesses roughly half the nation’s commercial milk supply for bacteria, antibiotics and other substances.  Adding H5N1 to the list would be straightforward, so “why wouldn’t we just add assays into this infrastructure that we already have?” said  @matt_f_mcknight , a manager at the company’s biosecurity division.

  • Ginkgo separately developed a gene analysis product, ENDAR, which detects markers of genetic engineering. The product was created specifically for IARPA’s FELIX program, and has since been spun off with Ginkgo’s biosecurity arm to a new company, Perimeter.

I have reported before that a novel H5 outbreak has been both repeatedly predicted and positioned to advance the goals of bio-surveillance. The more recent scenarios from Sherwood-Randall and the tabletops sharpen this view. The crisis would play out through a sequence of events:

  1. A spike in H5 detections in dairy would throw officials into alarm. This PCR-based H5 testing is already running under the National Milk Testing Strategy.
  2. A sequence would be pulled off the positive samples and run through genetic engineering screen. This is the job ENDAR was created for, now sitting at Perimeter.
  3. Officials reveal an origin story: a jailbroken AI model designed it, it was printed, tested in a cloud lab, scaled, and put into farm air systems.
  4. Poultry, beef and dairy are hit first. Massive culls of commercial poultry and backyard flocks take place, movement restrictions for livestock.
  5. When it makes the jump to humans, the Belfer policy recommendations are taken down from the shelf: access is limited to biomanufacturing capabilities and to any AI models sufficiently powerful to design a pathogen.

There has been a lot of speculation, given the new massive fear campaign around AI, about an AI-enhanced attack on the financial system or on water and wastewater systems.

Those remain possible (Jamie Dimon is, after all, saying a cyberattack is looming that could cause a massive liquidity event). But they are not what former National Security Council members are warning about: an H5 shock in livestock, attributed to an unlicensed model and print shop/cloud lab, used to lock animals and compute/synthesis in the same motion. Our Right to Compute and our chickens would be lost in one fell swoop.

This aligns with many of the stated goals of policymakers. The Absolute Zero decarbonization plan phases out beef and lamb. In Food Chain Reaction Game, a tabletop exercise involving a food crisis, participants reached for carbon credits and a meat tax. Gates has called for countries to move to synthetic beef. And defense agencies have been funding synthetic proteins, precision fermentation, and bio-surveillance. This is an open agenda. An H5 attack attributed to AI would achieve all this much more quickly than a meat tax — and can be passed as “public safety.”

It was also Bill Gates, who said of the next pandemic “this time people will pay attention,” that funded research by Yoshihiro Kawaoka at the University of Wisconsin–Madison, who worked on H5 mammalian adaptation. (I happen to report on this the very same day that fmr CDC Director Robert Redfield explicitly said that Bird Flu will be the next pandemic).

I’d prefer this remains a fictitious scenario for thinktanks and tabletop exercises. But the milk tests are running, the screen for genetic engineering exists, and the policy memo that speaks to an AI-enhanced H5 hit on poultry, beef and dairy is already written by a former high-ranking Homeland Security official.

People with that job title don’t publish fiction. They prepare us for the future they are staffed and funded to manage.

Tweet

Continue reading...

[ H/T The Burning Platform ]
  • Reading time 6 min read
  • Views1
  • Reading time 8 min read
  • Views1
  • Reading time 3 min read
  • Reading time 1 min read
  • Reading time 2 min read

Comments

There are no comments to display
Back
Top