Cisco Talos has disclosed CLOSEDQUORUM, which it describes as the first fully autonomous multi-model AI command-and-control implant. The malware uses multiple AI models to operate on its own inside a compromised network, marking a step up from earlier AI-assisted malware that still relied on human operators.

Alongside the disclosure, Talos released CAIRN, a tool to help security teams detect AI-integrated malware. The announcement lands in a week dominated by AI-security stories — from OpenAI pausing model training over rogue agents to the x47.c botnet abusing xAI's Grok.

The pattern is getting harder to ignore: the same agentic capabilities the labs are racing to ship are the ones attackers are starting to use. Defenders are now playing catch-up with detection tooling built specifically for AI-driven intrusions.