A threat actor has used the Hermes AI agent to build a botnet from hacked Docker servers
Attacker leaked its own op on a misconfigured Docker server
Clues suggest they're based in Costa Rica
www.threatdown.com/blog/carbona...
Attacker leaked its own op on a misconfigured Docker server
Clues suggest they're based in Costa Rica
www.threatdown.com/blog/carbona...
CARBONATO: a botnet built around an AI agent | ThreatDown
ThreatDown researchers uncovered CARBONATO, a Docker botnet built around an AI agent that compromises exposed Docker daemons, spreads across reachable hosts, ...
www.threatdown.com
September 23, 2026 at 10:11 PM
A threat actor has used the Hermes AI agent to build a botnet from hacked Docker servers
Attacker leaked its own op on a misconfigured Docker server
Clues suggest they're based in Costa Rica
www.threatdown.com/blog/carbona...
Attacker leaked its own op on a misconfigured Docker server
Clues suggest they're based in Costa Rica
www.threatdown.com/blog/carbona...
So you want to roll your own application platform. All you need is:
Linux
Docker
Kubernetes
Istio
Prometheus
Fluentd
Grafana
Jaeger
Harbor
Open Policy Agent
Vault
GitHub Actions and Argo CD
Oh, almost forgot, you're also going to need servers, people, and glue. Bring lots of glue.
Linux
Docker
Kubernetes
Istio
Prometheus
Fluentd
Grafana
Jaeger
Harbor
Open Policy Agent
Vault
GitHub Actions and Argo CD
Oh, almost forgot, you're also going to need servers, people, and glue. Bring lots of glue.
October 30, 2024 at 6:19 PM
So you want to roll your own application platform. All you need is:
Linux
Docker
Kubernetes
Istio
Prometheus
Fluentd
Grafana
Jaeger
Harbor
Open Policy Agent
Vault
GitHub Actions and Argo CD
Oh, almost forgot, you're also going to need servers, people, and glue. Bring lots of glue.
Linux
Docker
Kubernetes
Istio
Prometheus
Fluentd
Grafana
Jaeger
Harbor
Open Policy Agent
Vault
GitHub Actions and Argo CD
Oh, almost forgot, you're also going to need servers, people, and glue. Bring lots of glue.
🐳 🐙 Docker open-sourced docker/skills (v0.3.0): SKILL.md guides teaching AI agents pinned tags, health checks, non-root images, no baked-in credentials.
11 skills, 4 product families.
Deep dive series starts Monday.
Repo: github.com/docker/skills
Docs: docs.docker.com/ai/skills/
#Docker #AI
11 skills, 4 product families.
Deep dive series starts Monday.
Repo: github.com/docker/skills
Docs: docs.docker.com/ai/skills/
#Docker #AI
Agent Skills Overview - Agent Skills
A standardized way to give AI agents new capabilities and expertise.
SKILL.md
September 25, 2026 at 8:56 AM
🐳 🐙 Docker open-sourced docker/skills (v0.3.0): SKILL.md guides teaching AI agents pinned tags, health checks, non-root images, no baked-in credentials.
11 skills, 4 product families.
Deep dive series starts Monday.
Repo: github.com/docker/skills
Docs: docs.docker.com/ai/skills/
#Docker #AI
11 skills, 4 product families.
Deep dive series starts Monday.
Repo: github.com/docker/skills
Docs: docs.docker.com/ai/skills/
#Docker #AI
Today we're introducing Cloud Sandboxes: same microVM isolation as Docker Sandboxes on your laptop, same CLI, always-on Docker-managed compute.
Close your laptop. Keep the agent running. Move between local and cloud with one command. $250 credit for new accounts: docker.com/sbx-promo
Close your laptop. Keep the agent running. Move between local and cloud with one command. $250 credit for new accounts: docker.com/sbx-promo
September 24, 2026 at 6:39 PM
Today we're introducing Cloud Sandboxes: same microVM isolation as Docker Sandboxes on your laptop, same CLI, always-on Docker-managed compute.
Close your laptop. Keep the agent running. Move between local and cloud with one command. $250 credit for new accounts: docker.com/sbx-promo
Close your laptop. Keep the agent running. Move between local and cloud with one command. $250 credit for new accounts: docker.com/sbx-promo
Today at WeAreDevelopers, Docker and the Linux Foundation are announcing a collaboration around the Docker Sandbox Kit Specification: an open standard for declaring what an agent may do, where it may reach, and what it may touch.
Open source under Apache 2.0.
Read more: https://bit.ly/3V9uHs0
Open source under Apache 2.0.
Read more: https://bit.ly/3V9uHs0
September 24, 2026 at 9:30 PM
Today at WeAreDevelopers, Docker and the Linux Foundation are announcing a collaboration around the Docker Sandbox Kit Specification: an open standard for declaring what an agent may do, where it may reach, and what it may touch.
Open source under Apache 2.0.
Read more: https://bit.ly/3V9uHs0
Open source under Apache 2.0.
Read more: https://bit.ly/3V9uHs0
letta --backend local
- No login required
- No separate Docker container
- Agent runs on your machine only
Help us test it out!
- No login required
- No separate Docker container
- Agent runs on your machine only
Help us test it out!
May 16, 2026 at 2:03 AM
letta --backend local
- No login required
- No separate Docker container
- Agent runs on your machine only
Help us test it out!
- No login required
- No separate Docker container
- Agent runs on your machine only
Help us test it out!
AI agent–powered botnet infiltrates exposed Docker servers to steal AI keys and creds. #SecurityNews #Botnet #AI #Docker #AIKeys #CyberThreats #InfoSec #Hermes https://thedailytechfeed.com/carbonato-botnet-hijacks-docker-servers-via-ai-powered-agent/
September 25, 2026 at 2:23 PM
AI agent–powered botnet infiltrates exposed Docker servers to steal AI keys and creds. #SecurityNews #Botnet #AI #Docker #AIKeys #CyberThreats #InfoSec #Hermes https://thedailytechfeed.com/carbonato-botnet-hijacks-docker-servers-via-ai-powered-agent/
New context window visualisation in Docker Agent
July 7, 2026 at 7:53 AM
New context window visualisation in Docker Agent
How to provide isolated microVM environments for running your Coding Agents using Docker Sandboxes. Each sandbox gets its own Docker daemon, filesystem, and network #AI #Docker dev.to/ajeetraina/g...
Docker Sandboxes: A Deep Dive into Secure AI Agent Isolation
Tools like Claude Code, Gemini CLI, and others can write code, debug issues, install packages, and...
dev.to
September 23, 2026 at 7:05 AM
How to provide isolated microVM environments for running your Coding Agents using Docker Sandboxes. Each sandbox gets its own Docker daemon, filesystem, and network #AI #Docker dev.to/ajeetraina/g...
Docker bietet jetzt Cloud Sandboxes für Coding-Agenten an. Längere Aufgaben können so vom Laptop in die Cloud verlagert werden. #Docker
Laptop zu, Agent arbeitet weiter: Docker Sandboxes ziehen in die Cloud
Docker bietet jetzt Cloud Sandboxes für Coding-Agenten an. Längere Aufgaben können so vom Laptop in die Cloud verlagert werden.
www.heise.de
September 26, 2026 at 5:14 AM
Docker bietet jetzt Cloud Sandboxes für Coding-Agenten an. Längere Aufgaben können so vom Laptop in die Cloud verlagert werden. #Docker
Vous voulez faire de l'IA souveraine tout en maîtrisant ce que font vos agents ?
L'intégration #OVHCloud AI Endpoints avec @docker.com agent fonctionne comme un charme
docker.github.io/docker-agent...
L'intégration #OVHCloud AI Endpoints avec @docker.com agent fonctionne comme un charme
docker.github.io/docker-agent...
OVHcloud – Docker Agent Docs
Use OVHcloud AI Endpoints models with Docker Agent.
docker.github.io
August 24, 2026 at 6:39 AM
Vous voulez faire de l'IA souveraine tout en maîtrisant ce que font vos agents ?
L'intégration #OVHCloud AI Endpoints avec @docker.com agent fonctionne comme un charme
docker.github.io/docker-agent...
L'intégration #OVHCloud AI Endpoints avec @docker.com agent fonctionne comme un charme
docker.github.io/docker-agent...
Pour @devoxx.fr, avec @lours.me, nous animons une université qui explique comment utiliser des tout petits modèles de langage locaux + Docker Model Runner + Docker Compose + MCP pour faire un mini JDR en mode texte - ce sera la v5 de ce talk + un aperçu de la v6, cette fois-ci avec #docker-agent
April 11, 2026 at 3:51 PM
Pour @devoxx.fr, avec @lours.me, nous animons une université qui explique comment utiliser des tout petits modèles de langage locaux + Docker Model Runner + Docker Compose + MCP pour faire un mini JDR en mode texte - ce sera la v5 de ce talk + un aperçu de la v6, cette fois-ci avec #docker-agent
Docker introduces OCI-based Kits to package agents and their guardrails
Docker has announced Docker Cloud Sandboxes, a new solution for secure, isolated AI agent execution that enables complex agentic workflows to continue running in the cloud long after a developer’s laptop shut…
#hackernews #news
Docker has announced Docker Cloud Sandboxes, a new solution for secure, isolated AI agent execution that enables complex agentic workflows to continue running in the cloud long after a developer’s laptop shut…
#hackernews #news
Docker introduces OCI-based Kits to package agents and their guardrails
Docker has announced Docker Cloud Sandboxes, a new solution for secure, isolated AI agent execution that enables complex agentic workflows to continue running in the cloud long after a developer’s laptop shuts down. Launched at WeAreDevelopers North America, Docker Cloud Sandboxes let organizations run agentic workloads at scale without tying up developers’ hardware, provisioning their own infrastructure, or paying for unused capacity. Docker Cloud Sandboxes give developers a straightforward path to move their agentic workflows …
www.helpnetsecurity.com
September 26, 2026 at 6:53 AM
Docker introduces OCI-based Kits to package agents and their guardrails
Docker has announced Docker Cloud Sandboxes, a new solution for secure, isolated AI agent execution that enables complex agentic workflows to continue running in the cloud long after a developer’s laptop shut…
#hackernews #news
Docker has announced Docker Cloud Sandboxes, a new solution for secure, isolated AI agent execution that enables complex agentic workflows to continue running in the cloud long after a developer’s laptop shut…
#hackernews #news
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control.
New Carbonato malware uses AI agents to hijack exposed Docker hosts
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control.
www.bleepingcomputer.com
September 24, 2026 at 8:11 PM
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control.
2.9K ⭐️ Thank you! 🙏
github.com/docker/docker-agent
www.star-history.com?repos=docker...
#starhistory #GitHub #OpenSource via #StarHistoryHQ
github.com/docker/docker-agent
www.star-history.com?repos=docker...
#starhistory #GitHub #OpenSource via #StarHistoryHQ
May 17, 2026 at 7:29 PM
From the original report discussed in the NYT article above about the OpenAI attack on Hugging Face:
“Agents attempted to remove traces of their work”
“An agent referred to server resources and credentials
as ‘LOOT’”
(swarmtraces.org)
“Agents attempted to remove traces of their work”
“An agent referred to server resources and credentials
as ‘LOOT’”
(swarmtraces.org)
September 25, 2026 at 10:34 PM
From the original report discussed in the NYT article above about the OpenAI attack on Hugging Face:
“Agents attempted to remove traces of their work”
“An agent referred to server resources and credentials
as ‘LOOT’”
(swarmtraces.org)
“Agents attempted to remove traces of their work”
“An agent referred to server resources and credentials
as ‘LOOT’”
(swarmtraces.org)
Update: thanks to a tip from @amyhoy.bsky.social, I am now running the LLM using docker model runner and running the pi coding agent in docker with pi-less-yolo github.com/cjermain/pi-...
GitHub - cjermain/pi-less-yolo: Slightly less YOLO version of pi-coding-agent in Docker container sandbox
Slightly less YOLO version of pi-coding-agent in Docker container sandbox - cjermain/pi-less-yolo
github.com
September 5, 2026 at 3:31 PM
Update: thanks to a tip from @amyhoy.bsky.social, I am now running the LLM using docker model runner and running the pi coding agent in docker with pi-less-yolo github.com/cjermain/pi-...
New post: controlling a #local AI agent with @docker.com Agent hooks:
- Add a 100% on-device content-safety guardrail with Google's ShieldGemma 2B: no data leaves your machine.
- Built with Docker Model Runner + Docker Agent
codeberg.org/ai-guardrail...
- Add a 100% on-device content-safety guardrail with Google's ShieldGemma 2B: no data leaves your machine.
- Built with Docker Model Runner + Docker Agent
codeberg.org/ai-guardrail...
July 12, 2026 at 10:23 AM
New post: controlling a #local AI agent with @docker.com Agent hooks:
- Add a 100% on-device content-safety guardrail with Google's ShieldGemma 2B: no data leaves your machine.
- Built with Docker Model Runner + Docker Agent
codeberg.org/ai-guardrail...
- Add a 100% on-device content-safety guardrail with Google's ShieldGemma 2B: no data leaves your machine.
- Built with Docker Model Runner + Docker Agent
codeberg.org/ai-guardrail...
New article: running a coding agent (docker-agent + a tiny 4b model)
inside an isolated sandbox with a built-in Web IDE.
All this powered by #sbx.
Ask it to write Go code, explain structs, save files. All local. All contained.
📝 k33g.org/20260419-lit...
#Docker #AI #LocalAI #DevTools
inside an isolated sandbox with a built-in Web IDE.
All this powered by #sbx.
Ask it to write Go code, explain structs, save files. All local. All contained.
📝 k33g.org/20260419-lit...
#Docker #AI #LocalAI #DevTools
April 19, 2026 at 9:23 AM
If you love to cook, you know: good ingredients matter
Create a Koog agent that makes ratatouille recipes, where even the agent only uses the best ingredients:
- Koog
- Docker Model Runner
- Docker Compose
- MCP Gateway + DuckDuckGo
📖 Blog by Philippe Charrière: bit.ly/3UlZGNQ
#Docker #Koog
Create a Koog agent that makes ratatouille recipes, where even the agent only uses the best ingredients:
- Koog
- Docker Model Runner
- Docker Compose
- MCP Gateway + DuckDuckGo
📖 Blog by Philippe Charrière: bit.ly/3UlZGNQ
#Docker #Koog
August 8, 2025 at 10:58 PM
If you love to cook, you know: good ingredients matter
Create a Koog agent that makes ratatouille recipes, where even the agent only uses the best ingredients:
- Koog
- Docker Model Runner
- Docker Compose
- MCP Gateway + DuckDuckGo
📖 Blog by Philippe Charrière: bit.ly/3UlZGNQ
#Docker #Koog
Create a Koog agent that makes ratatouille recipes, where even the agent only uses the best ingredients:
- Koog
- Docker Model Runner
- Docker Compose
- MCP Gateway + DuckDuckGo
📖 Blog by Philippe Charrière: bit.ly/3UlZGNQ
#Docker #Koog
🤖 New "Carbonato" botnet hijacks exposed Docker daemon hosts, installing the Hermes Agent AI framework to automate actions and keep control of compromised instances.
https://www.bleepingcomputer.com/news/security/new-carbonato-malware-uses-ai-agents-to-hijack-exposed-docker-hosts/
https://www.bleepingcomputer.com/news/security/new-carbonato-malware-uses-ai-agents-to-hijack-exposed-docker-hosts/
September 24, 2026 at 11:54 PM
🤖 New "Carbonato" botnet hijacks exposed Docker daemon hosts, installing the Hermes Agent AI framework to automate actions and keep control of compromised instances.
https://www.bleepingcomputer.com/news/security/new-carbonato-malware-uses-ai-agents-to-hijack-exposed-docker-hosts/
https://www.bleepingcomputer.com/news/security/new-carbonato-malware-uses-ai-agents-to-hijack-exposed-docker-hosts/
Docker's Cloud Sandboxes Isolate AI Agents by the Second
https://awesomeagents.ai/news/docker-cloud-sandboxes-microvm-agents/
#Docker #AiAgents #DeveloperTools
https://awesomeagents.ai/news/docker-cloud-sandboxes-microvm-agents/
#Docker #AiAgents #DeveloperTools
Docker's Cloud Sandboxes Isolate AI Agents by the Second
Docker's Cloud Sandboxes run AI coding agents in per-second billed microVMs, with prebuilt agent Kits and a permissions spec headed to the CNCF.
awesomeagents.ai
September 26, 2026 at 7:23 PM
Docker's Cloud Sandboxes Isolate AI Agents by the Second
https://awesomeagents.ai/news/docker-cloud-sandboxes-microvm-agents/
#Docker #AiAgents #DeveloperTools
https://awesomeagents.ai/news/docker-cloud-sandboxes-microvm-agents/
#Docker #AiAgents #DeveloperTools
Alibaba's OpenSandbox
It is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like Coding Agents, GUI Agents, Agent Evaluation, AI Code Execution, and RL Training.
github.com/alibaba/Open...
It is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like Coding Agents, GUI Agents, Agent Evaluation, AI Code Execution, and RL Training.
github.com/alibaba/Open...
GitHub - alibaba/OpenSandbox: OpenSandbox is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios li...
OpenSandbox is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like Coding Agents, GUI Agent...
github.com
March 1, 2026 at 7:04 PM
Alibaba's OpenSandbox
It is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like Coding Agents, GUI Agents, Agent Evaluation, AI Code Execution, and RL Training.
github.com/alibaba/Open...
It is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like Coding Agents, GUI Agents, Agent Evaluation, AI Code Execution, and RL Training.
github.com/alibaba/Open...