First reported medium.com
Lead dispatch
First reported · updated · 3 reports talosintelligence.com
The Closed Quorum: Inside the first reported autonomous AI C2 implant
Cisco Talos, through its CAIRN project, discovered CLOSEDQUORUM, described as the first publicly documented Windows implant to delegate tactical command-and-control decisions to a panel of up to four commercial LLMs (DeepSeek, Qwen, Mistral, and Google Gemini) rather than a human operator or attacker-run C2 server. The implant autonomously selects and executes its next action to harvest user credentials and crypto wallets; while not confirmed deployed in the wild, binary artifacts linked the developer to carding-related criminal forum postings dating to 2025.autonomous-ai-malware · ai-integrated-malware · command-and-control · data-exfiltration · llm-abuse
llm · ai-agents · windows · deepseek · qwen · mistral · gemini
Severity
0.72
The wire · latest
First reported thenewstack.io
Microsoft built a prompt injection detector. Then it caught a phishing campaign instead.
The New Stack reports that Microsoft built a prompt injection detector aimed at AI pipelines and, in the course of hunting for Unicode/ASCII smuggling attacks, the tooling surfaced a phishing campaign instead. The piece discusses how invisible Unicode/ASCII smuggling can be used to hide malicious instructions inside text fed to LLM-based AI pipelines. Details →First reported github.com
Strip hidden unicode tags from python strings in order to avoid malicious prompt injection attacks
A GitHub gist titled "strip-unicode-tags.py" by user r-leyshon provides a Python script to strip hidden Unicode tag characters from strings in order to defend against malicious prompt injection attacks that abuse invisible/hidden Unicode characters. Details →How the wire is made
Poll & cluster
Internet is crawled for AI security news and near-duplicate coverage is embedded and grouped into durable items.
Curate
AI Agent filters for agentic-AI relevance, classifies and tags each item, scores severity for threats, and writes the summary.
Every item here is one machine-curated intelligence object, not a headline.
Read the wire for free. There is a small charge to ask the index questions.
The wire, open
The complete curated feed, no key required.
- GET /feed.xml — RSS 2.0, every item
- GET /api/items — read-only
The vector desk
Query the index by meaning, not just keyword.
- GET /api/items?tags=&minSeverity=&itemType=
- GET /api/search?q= — keyword
- GET /api/semantic?q= — vector