{"data":{"id":"20c00376-4203-47b6-b336-1fe1a49ea148","title":"AI malware just removed the human from the attack loop","summary":"Researchers at Cisco Talos discovered CLOSEDQUORUM, a malware that uses a panel of large language models (LLMs, AI systems trained on large amounts of text data) to fully automate cyberattacks without human involvement. The malware targets credential theft by stealing passwords from Windows systems, web browsers, and cryptocurrency wallets, and uses multiple AI models that vote on attack decisions, removing the need for human attackers to actively control the attack. While this represents a significant advancement in automated attacks, Cisco Talos confirmed that CLOSEDQUORUM has not yet been deployed in real-world attacks.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://www.csoonline.com/article/4225264/ai-malware-just-removed-the-human-from-the-attack-loop.html","publishedAt":"2026-09-23T00:39:51.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["model_evasion","jailbreak"],"issueType":"news","affectedPackages":null,"affectedVendors":["Google","Mistral"],"affectedVendorsRaw":["DeepSeek","Qwen","Mistral","Google Gemini"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-23T00:39:51.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","safety"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}