Lead dispatch
First reported · updated · 2 reports talosintelligence.com
The Closed Quorum: Inside the first reported autonomous AI C2 implant
Cisco Talos documented CLOSEDQUORUM, described as the first publicly reported Windows implant with fully autonomous command and control that delegates its next-action decisions to a quorum of up to four commercial LLMs (DeepSeek, Qwen, Mistral, and Google Gemini) to harvest credentials and crypto wallets without a human operator. The binary was discovered via Talos' CAIRN project; artifacts linked its developer to carding-related criminal forum postings dating to 2025, though no in-the-wild deployment has been confirmed.autonomous-c2 · ai-integrated-malware · agentic-worm · credential-theft · data-exfiltration
llm · ai-agents · windows
The wire · latest
No items match these filters yet. Widen the severity range or clear a tag — the wire only shows curated, agentic-AI-relevant items, so quiet filters mean a quiet field, not a broken feed.
How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector