Follow the latest coverage, related explainers and connected technology stories.
Cisco Talos researchers identified a Windows malware named ClosedQuorum that delegates post-compromise decisions to a committee of Gemini, DeepSeek, Qwen, and Mistral models. Although there is no evidence of its actual deployment, its design illustrates a trend toward automating attack chains without continuous human intervention.
Microsoft is tracking campaigns impersonating ChatGPT, Microsoft Copilot, DeepSeek, and Claude to steal payment data and credentials and distribute malware. The article calls for correlating email, identity, device, and cloud application signals to detect and disrupt attacks before they become broader breaches.