← Incidents
INCIDENT 639MalwareLOW / UNDER REVIEWSourced
The Closed Quorum: Inside the first reported autonomous AI C2 implant
CLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and control (C2). It represents a shift in effort displacement for attackers, in which expanding portions of the attack chain can be executed without operator involvement.
Last evidence update
22 SEP 2026 · 10:00 UTC
Source count
1
Status
reported
Observation history
How this record has evolved as evidence accumulated.
23 SEP · 05:22 UTC
Initial report
Evidence