The Carbonato botnet is actively targeting exposed Docker daemons to deploy the Hermes AI agent framework. Attackers overwrite the agent’s configuration to execute remote tasks received via Telegram. Security administrators are urged to secure Docker APIs and prevent public exposure.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →