SecuritySiliconANGLEabout 2 hours ago
Talos Finds Malware That Votes Via Four LLMs
4 min read
Cisco Talos detailed CLOSEDQUORUM, a Windows credential stealer that queries Google Gemini, DeepSeek, Qwen and Mistral every five to 15 minutes and acts on the majority vote, with DeepSeek breaking ties. Talos also released CAIRN, an open-source toolkit that hunts AI-integrated malware from metadata alone. No attacks have been observed yet.
Level
Hype check
Tap to vote and see what everyone thinks.
