Cisco Talos Uncovers CLOSEDQUORUM, First Windows Implant Delegating C2 Decisions to AI

Cisco Talos has documented CLOSEDQUORUM, a Windows implant believed to be the first to delegate tactical C2 decisions to multiple large language models through voting, operating without human involvement. Talos also released the open-source framework CAIRN to identify and classify malware that integrates AI chat capabilities.

2026-09-22 ~ 2026-09-23 · 2 related posts

• Cisco Talos Finds CLOSEDQUORUM Malware Run by an AI Hive Mind of Four LLMs — nordicinst · 2026-09-22
• CLOSEDQUORUM: First Documented Malware to Let DeepSeek, Qwen, Mistral and Gemini Vote on C2 Decisions — TechNadu · 2026-09-23