First reported · updated · 4 reports air.security
Lead dispatch
First reported · updated · 5 reports talosintelligence.com
The Closed Quorum: Inside the first reported autonomous AI C2 implant
Cisco Talos documented CLOSEDQUORUM, a Windows implant it describes as the first publicly reported autonomous AI command-and-control (C2) malware, discovered via its CAIRN project. The binary delegates its next-action decisions to a quorum of up to four commercial LLMs (DeepSeek, Qwen, Mistral, and Google Gemini) queried in sequence, executing their chosen actions to harvest credentials and crypto wallets without a human operator or dedicated C2 server; Talos has no confirmation of in-the-wild deployment but linked the developer to carding forum postings.autonomous-agent · ai-c2 · malware · data-exfiltration · tool-abuse
llm · ai-agents · windows
Severity
0.60
The wire · latest
First reported · updated · 5 reports forever.security
BragJack: How We Hijacked 5 Of The World's Most Popular Browsers Using Their Built-In AI Assistants
Researchers at Forever Security ("BragJack") and Zenity Labs ("PleaseFix") disclosed a new class of zero-click agent-hijacking flaws affecting built-in AI assistants in Chrome (Gemini), Perplexity Comet, Microsoft Edge, Opera Neon, and Claude in Chrome, earning tens of thousands in bounties and CVEs including CVE-2026-0628 and CVE-2026-55945. The root design flaw is that agentic browsers combine trusted and untrusted content from multiple origins, breaking same-origin isolation and letting hidden malicious instructions weaponize the agent to access local files, camera/microphone, browser profiles, history, and connected accounts. Separately, Manifold Security reported two Claude for Chrome extension bugs (a missing event.isTrusted check and a ?skipPermissions=true privileged-init weakness) that remain unpatched in v1.0.80, enabling any browser extension to trigger Claude to read Gmail, Docs, and Calendar. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector