Last seen September 22, 2026

Gemini Security Breach

A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine the actions to take during post-compromise stages of an attack. [...]

Technical Severity
Low severity
Lifecycle Status

NEW

What Happened

A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine the actions to take during post-compromise stages of an attack. [...]

Why This Matters

Current evidence identifies a security issue involving Gemini, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether Gemini is present in your environment and review the affected configuration.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

Sep 22, 2026 23:34

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: UNKNOWN

Primary entities:

GoogleGeminiNew ClosedQuorum Windows

Timeline

  • Incident first seen
    Sep 22, 2026 23:34

    BugSkan first recorded this incident.

  • New ClosedQuorum Windows malware uses AI for attack decisions
    Sep 22, 2026 23:34

    bleepingcomputer.com · Research

Sources

New ClosedQuorum Windows malware uses AI for attack decisions

bleepingcomputer.com · Sep 22, 2026 23:34

A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine the actions to take during post-compromise stages of an attack. [...]

Open publisher source

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence