[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuJV4-kC6JSRTEYwXmMO_IzAU7RJPXiFPv83CHuWwiPE":3},{"article":4,"iocs":53,"watch_terms":58,"solutions":59,"lesson":148},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"b2746fe9-5d14-452b-8bd7-843b13201cb5","Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent","carbonato-botnet-compromises-docker-hosts-to-deploy-telegram-controlled-hermes-a-a2739f","Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. \"The implant installs the framework unchanged, then overwrites its SOUL.md persona file,\" ThreatDown said. \"The 39-line prompt directs it to execute tasks received through","A new botnet malware named Carbonato is compromising exposed Docker daemons to deploy the Hermes Agent, an open-source AI framework. The malware exploits unauthenticated Docker daemons, spreads worm-like, and uses a privileged container to execute commands. The Hermes Agent is then configured to accept commands via Telegram, with operators based in Costa Rica.","Carbonato botnet targets exposed Docker daemons to deploy Telegram-controlled AI agent.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fcarbonato-botnet-compromises-docker.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEi3O4ih8J3-A5sGh57xyYKMGbnSqaXbWhu2g9HBE_mG11gEdedMUmYyeeYpA9TnNPwRsB4t-5V9UTW54iOR0VNzyaaa0fWhOG4Oi46KwGvrrVQRdWIDS7GX6YxjaMrA6sF9RHWNyO8gBttCQ7Nc8LUmrhhH24jSp1lPDuhok9r3CfKxgGJRObZRqRTW-5Gf\u002Fs1600\u002Fhermes-telegram.jpg","2026-09-28T11:46:00+00:00","2026-09-28T18:00:47.47935+00:00",8,[17,20,22,25,27],{"name":18,"type":19},"Docker","product",{"name":21,"type":19},"Hermes Agent",{"name":23,"type":24},"AI","technology",{"name":26,"type":24},"LLM",{"name":28,"type":29},"knaithe","threat_actor","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":30,"icon":32,"name":33,"slug":34},null,"Malware","malware",[36,41,43,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"c70f3a41-2f0c-4608-870d-b8cbcd8be076","Cloud Security","cloud-security",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54],{"type":55,"value":56,"context":57},"ip","2375","Default port for unauthenticated Docker daemons",[18,21],{"controls":60,"vendors":147},[61,89,118],{"slug":62,"name":63,"problem":64,"products":65},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[66,74,82],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":84,"url":87,"description":88},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"slug":90,"name":91,"problem":92,"products":93},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[94,102,110],{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"slug":119,"name":120,"problem":121,"products":122},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",[123,131,139],{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"fortinet","Fortinet","\u002Fvendor-logos\u002Ffortinet.png","fortigate","FortiGate","https:\u002F\u002Fwww.fortinet.com\u002Fproducts\u002Fnext-generation-firewall","Next-generation firewalls with intrusion prevention and SD-WAN.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"clavister","Clavister","\u002Fvendor-logos\u002Fclavister.png","clavister-netwall","Clavister NetWall","https:\u002F\u002Fwww.clavister.com\u002Fproducts\u002Fclavister-netwall\u002F","Next-generation firewalls developed in Sweden.",{"vendor_slug":140,"vendor_name":141,"vendor_logo":142,"product_slug":143,"product_name":144,"url":145,"description":146},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png","quantum-firewall","Quantum Force firewalls","https:\u002F\u002Fwww.checkpoint.com\u002Fquantum\u002Fnext-generation-firewall\u002F","Next-generation firewalls with threat prevention.",[],{"slug":149,"title":150,"body":151,"framework_refs":152,"framework_notes":162},"exposed-docker-daemons-hijacked-by-ai-powered-telegram-botnet","Exposed Docker Daemons Hijacked by AI-Powered Telegram Botnet","The Carbonato botnet exploits a critical and avoidable misconfiguration: Docker daemons left exposed to the internet without authentication. By gaining unauthenticated access, attackers can spin up privileged containers that effectively have root-level access to the underlying host, enabling worm-like lateral spread across environments. The use of an AI agent (Hermes) controlled via Telegram demonstrates how attackers are weaponizing legitimate open-source tools to evade traditional detection. This incident highlights that exposing container orchestration APIs without proper access controls is equivalent to leaving a server room unlocked — any attacker can walk in and take control.",[153,154,155,156,157,158,159,160,161],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 12: Network Infrastructure Management","CIS Docker Benchmark v1.6","NIST SP 800-190: Application Container Security Guide","NIST AC-3: Access Enforcement","NIST CM-6: Configuration Settings","NIST SI-3: Malicious Code Protection","MITRE ATT&CK T1610: Deploy Container","MITRE ATT&CK T1609: Container Administration Command",{}]