Cisco Talos finds 20 more AI malware samples

Cisco Talos says its open-source CAIRN framework found about 20 additional examples of AI-integrated malware, including one Windows family whose autonomous command system consulted four large language models. Talos’s CAIRN release and its CLOSEDQUORUM report say researchers could not confirm real-world use, even though the sample was built to steal credentials and cryptocurrency; WIRED’s coverage frames the finding as an early defensive signal, not proof of a broad attack wave. Builders should inventory AI-facing endpoints and require human-reviewed incident evidence before treating model-connected malware as an operational trend, extending the archive’s analysis of a leaked cyber model.