Threat+Constellation
Live— UTC
← Incidents
INCIDENT 639MalwareLOW / UNDER REVIEWSourced

The Closed Quorum: Inside the first reported autonomous AI C2 implant

CLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and control (C2). It represents a shift in effort displacement for attackers, in which expanding portions of the attack chain can be executed without operator involvement.

Last evidence update
22 SEP 2026 · 10:00 UTC
Source count
1
Status
reported
Observation history

How this record has evolved as evidence accumulated.

23 SEP · 05:22 UTC
Initial report
Evidence