First reported · updated · 2 reports youtube.com
Lead dispatch
First reported · updated · 5 reports talosintelligence.com
The Closed Quorum: Inside the first reported autonomous AI C2 implant
Cisco Talos documented CLOSEDQUORUM, a Windows implant it describes as the first publicly reported autonomous AI command-and-control (C2) malware, discovered via its CAIRN project. The binary delegates its next-action decisions to a quorum of up to four commercial LLMs (DeepSeek, Qwen, Mistral, and Google Gemini) queried in sequence, executing their chosen actions to harvest credentials and crypto wallets without a human operator or dedicated C2 server; Talos has no confirmation of in-the-wild deployment but linked the developer to carding forum postings.autonomous-agent · ai-c2 · malware · data-exfiltration · tool-abuse
llm · ai-agents · windows
Severity
0.60
The wire · latest
First reported theregister.com
Extortion crews have their eyes on high-value AI data, Google warns
Google's Mandiant threat hunters, in their latest AI Threat Tracker, report that data-theft-and-extortion crews are increasingly stealing companies' proprietary AI data — including source code, prompts, model scripts, secrets, and proprietary models — and threatening to leak it unless a ransom is paid. Cited cases include a healthcare firm whose drug and AI research plus a proprietary model were exfiltrated, and an AI media-generation company whose AI assets were stolen, with actors like TeamPCP named as especially successful. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector