NewsThe Hacker News2026-09-23 14:17 UTCSME

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and crypto wallet data. Talos has not seen this setup work from start to finish, and the public version of the malware does not work as it is.

Other advisories

osv:GHSA-p3pr-8f3m-4qp8none
pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host
ghsa:GHSA-p3pr-8f3m-4qp8medium
pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host
osv:CLEANSTART-2026-QV20553none
SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2
osv:CLEANSTART-2026-FU14728none
SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests
osv:CLEANSTART-2026-YX87977none
Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins, a directory that does not exist by default
CVE-2026-107802none
SumatraPDF ist ein Multi-Format-Reader für Windows.
osv:CVE-2026-107802none
SumatraPDF — Windows command-line argument injection in AI selection-translate
CVE-2026-107736none
SumatraPDF ist ein Multi-Format-Reader für Windows.

Other news entries

Newsbleepingcomputer2026-10-09
Microsoft: Outdated Windows devices will stop receiving security updates
Newsbleepingcomputer2026-10-07
Microsoft Outlook to block MSIX attachments starting November
Newsthehackernews2026-10-06
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
Newsbleepingcomputer2026-10-05
Microsoft: Windows KB5124010 update crashes some games and apps
Newsbleepingcomputer2026-10-01
Microsoft enables Windows settings backup by default for orgs
Newsbleepingcomputer2026-09-30
Microsoft is rolling out Linux container support to WSL
Newsbleepingcomputer2026-09-29
Signal adds encypted local backup support to iOS, desktop apps
Newsbleepingcomputer2026-09-29
Windows 11 2026 Update released, here's everything you need to know

Source: https://thehackernews.com/2026/09/windows-malware-is-built-to-let-up-to.html

More on Windows