Malware just stopped needing a human. cisco talos disclosed closed quorum on september 22, the…
malware just stopped needing a human. cisco talos disclosed closed quorum on september 22, the first windows implant whose command and control is decided by up to four commercial ai models voting on the next action, with no operator in the loop.
the attack chain now has a quorum instead of a commander.
Context
Verified source: Cisco Talos (Sep 22, 2026) published The Closed Quorum, calling CLOSEDQUORUM the first reported autonomous AI command and control implant, found through its CAIRN project. The Hacker News (Sep 23) and SiliconANGLE (Sep 22) report a Windows malware that takes orders from a vote of up to four AI models instead of an attacker's server.
The Sep 22 disclosure, the up-to-four-model vote and Windows target match the sources, and 'first' is Talos's own wording, 'first reported'. 'No operator in the loop' is the post's reading of Talos's autonomous description, and which commercial models were used was not seen in the excerpts read, so unsupported here, not refuted. 'A quorum instead of a commander' is the author's opinion.
Watch next
- Read Talos's post for which AI models the sample called.
Sources
- The Closed Quorum: Inside the first reported autonomous AI C2 implant, Cisco Talosblog.talosintelligence.com
- This Windows Malware is Built to Let Up to Four AI Models Vote, The Hacker Newsthehackernews.com
- Cisco Talos finds malware that puts its next move to a four-model vote, SiliconANGLEsiliconangle.com
Provenance
The note above is reproduced unedited from the original post, first published on Threads on 24 September 2026 at 12:25 IST. Sources are the papers and datasets the note draws on.
View the original post ↗Embed this note
More notes
The air is now being asked to keep its own ledger
the air is now being asked to keep its own ledger: ecmwf’s aifs compo becomes the first ai model to forecast atmospheric composition globally every three hours, cleanair simulates 365 days of pm2.5 over china in ten seconds, and a unified framework maps six pollutants at one kilometer across the whole country. the air now files its own composition report.
read the note →The current is now being asked to draw its own map
the current is now being asked to draw its own map: china’s langya 2.0 predicts six ocean phenomena including internal waves and mesoscale eddies, a deep net called wenhai resolves eddies globally with air sea flux formulas built in, and scripps infers surface currents from the way temperature patterns deform in satellite images. the ocean now files its own circulation report.
read the note →The soil is now being asked to report its own carbon
the soil is now being asked to report its own carbon: a nix color sensor paired with generative data augmentation predicts soil organic carbon without a lab, random forest drives 74 percent of soil health mapping studies, and sentinel 2 tracks five year carbon change across france and italy from 922 samples. the dirt now files its own carbon account.
read the note →