Cisco Talos Finds CLOSEDQUORUM Malware Run by an AI Hive Mind of Four LLMs
nordicinst · x · 2026-09-22
Cisco Talos released CAIRN, an open-source framework for detecting and classifying malware that integrates AI chatbots, exploiting the 'fingerprints' AI integration leaves behind. Using it, researchers discovered CLOSEDQUORUM, a hacking tool with fully autonomous command-and-control that polls up to four LLMs—a hive mind—to decide its moves inside a target system, with no humans in the loop. A sign agentic AI is now live in attack tooling.
More from Safety
- Spinning up containers for 20-line agent tools is backwards: Safescript compiles provable, 50ms-deploy apps — uriwa · 2026-11-12
- Zvi dissects Anthropic's latest system card, disputing the autonomy threshold call — Don't Worry About the Vase (Zvi) · 2026-11-12
- AI Analysis of 42 Jensen Huang Podcasts Tracks Shift on China and Chip Controls — ShakeelHashim · 2026-11-12
- Small AI sites under 20 MW mostly skip the permitting fights battering big data centers — antavedissian · 2026-11-12
- Newsweek op-ed: US should fund hospitals and universities in federated AI learning — Saul_Loveman · 2026-11-12
- Ron Bodkin: automated research taste advances faster than expected, but the evidence is weak — ronbodkin · 2026-11-11