The Closed Quorum: Inside the first reported autonomous AI C2 implant

Reported by Cisco Talos (Ryan Fetterman)

Summary by Cyber Security News22 Sep 2026, 12:00 CEST

About this summary. This is a short, independently written summary of an article first published by Cisco Talos. Cyber Security News did not report or verify the underlying story. Read the original: https://blog.talosintelligence.com/the-closed-quorum-inside-the-first-reported-autonomous-ai-c2-implant/

CLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and control (C2). While we do not have confirmation of in-the-wild deployment, artifacts from the binary were used to connect the developer to postings on criminal forums related to carding, dating back to 2025.

Read the full article at Cisco Talos →