Tools
CLOSEDQUORUM: Talos finds Windows implant that lets 4 AIs vote the next attack move
Cisco Talos on 22 September 2026 described CLOSEDQUORUM, a Windows implant that, after deployment, asks up to four commercial LLMs (DeepSeek, Qwen, Mistral, and Gemini) to vote on the next constrained action — such as credential theft, injection, or persistence — and then acts without a human operator in that loop. Talos has not confirmed in-the-wild deployment; the public distribution build ships with dummy API keys and a dummy webhook, so it is non-functional as distributed. High-level reporting only from the Talos blog and The Register: no proof-of-concept, exploit steps, or payloads. This is the CLOSEDQUORUM / CAIRN case, not Plugin4Shell, not Hacktron, and not Unit 42.