ThreatDown delivers elite Managed Detection and Response purpose-built for resource-constrained teams with high-efficacy protection without complexity. Combining artificial intelligence and expert analyst judgment, ThreatDown intercepts sophisticated attacks with speed and accuracy, scaling security effortlessly. Recognized by MRG Effitas, AVLab, and G2, ditch fragmented tools for fast, 24/7 protection without overhead.

AI-powered vulnerability research is contributing to a major increase in security updates, raising concerns that IT teams could fall behind as patching demands grow, according to cybersecurity...

AI-powered vulnerability research is contributing to a sharp increase in security updates, raising concerns that IT teams could fall behind as patching demands grow, according to cybersecurity company ThreatDown.

ThreatDown MDR is a 24/7/365 security analyst service that explains and resolves suspicious endpoint events. Our team of cybersecurity experts delivers proactive monitoring, investigation, and remediation, catching threats before they escalate. With ThreatDown's always-on protection, organizations gain peace of mind and safeguard their data, reputation, and finances - backed by real analyst expertise, not just automation.

Read more

管理者がほぼ無制限の権限を持つインターフェースを誤って公開してしまえば、サーバーの侵害にソフトウェアの脆弱性は必要ありません。ThreatDown のチームは、ボットネット「Carbonato」の詳細を明らかにしました。このボットネットは、TCP ポート 2375 で認証なしの Docker デー

新たに発見されたDockerボットネットが、侵害したホストにAIエージェントを埋め込み、盗んだ認証情報を攻撃者に送信していることがわかりました。ThreatDownの研究者らは最近、「Carbonato」と呼ばれるボットネットを発見しました。Carbonatoは、ポート2375に公開された認証なしのDockerデーモン

Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md persona file," ThreatDown said. "The 39-line prompt directs it to execute tasks received through

Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. "The implant installs the framework unchanged, then overwrites its SOUL.md persona file," ThreatDown said. "The 39-line prompt directs it to execute tasks received through

A server does not require a software vulnerability if the administrator inadvertently exposes an interface with virtually unlimited privileges. The ThreatDown team detailed the Carbonato botnet, which actively scans for unauthenticated Docker daemons on TCP port 2375. Consequently, it hijacks the host and transforms it into an AI-managed node. Specialists breached the Carbonato infrastructure in August 2026 via an exposed Docker Registry.

ThreatDown discovered a Docker botnet that installs an unmodified open-source agent framework, overwrites its persona file, and uses stolen AI API keys to fund its own LLM gateway. Traditional C2 detection tools cannot see it.

CARBONATO exploits exposed Docker daemons, installs an AI agent, steals API keys and spreads across networks with autonomous command execution. CARBONATO is a Docker-based botnet that has been active since at least October 2024. ThreatDown discovered the operation after finding an unauthenticated container registry exposed to the internet. The registry contained the attackers’ entire toolchain […]

​ThreatDown​ ​researchers​ ​uncovered​ ​CARBONATO,​ ​a​ ​Docker​ ​botnet​ ​built​ ​around​ ​an​ ​AI​ ​agent​ ​that​ ​compromises​ ​exposed​ ​Docker​ ​daemons,​ ​spreads​ ​across​ ​reachable​ ​hosts,​ ...

ThreatDown researchers have documented Carbonato, a malware campaign that exploits unauthenticated Docker API on port 2375 to deploy the Hermes GH0ST AI agent as a post-compromise command tool. The operation spans nearly two years, combining established persistence techniques with a novel twist: usi

Uma nova ameaça com capacidade de propagação autónoma está a visar servidores vulneráveis para assumir o controlo de infraestruturas digitais. Segundo dados revelados pelos investigadores da ThreatDown, divisão de cibersegurança da Malwarebytes, o malware batizado de Carbonato explora ambientes Dock

In this episode, Dean Shroll (https://www.linkedin.com/in/deanshroll/) , senior director of sales engineering at ThreatDown (https://threatdown.com) , explains how the company's Nebula and OneView consoles simplify protection across Mac, Linux, and Windows endpoints while its managed detection and response team absorbs the 24/7 monitoring that resource-constrained teams can't staff on their own. Joining him are Jonathan Waldrop (https://www.linkedin.com/in/jonathanwaldrop/) , CISO at Acoustic (https://www.acoustic.com/) , and Arif Hameed (https://www.linkedin.com/in/arif-hameed/) , CISO at C&R Software (https://www.crsoftware.com/) . Want to know: • Why is managing security for resource-constrained organizations suddenly getting more attention? • How does ThreatDown keep its console simple without sacrificing depth across Windows, Mac, Linux, and cloud environments? • Where does ThreatDown draw the line between what it automates and what still needs a human analyst? • How does the platform distinguish suspicious behavior from normal DevOps activity without drowning teams in false positives? • What guardrails exist to stop overly broad exclusions from opening up a device? • Who owns what when an MDR provider is involved, and where does that responsibility actually end? • How should a CISO justify an MDR investment to the board when nothing bad happens? Check out the episode for the answers you need. Huge thanks to our sponsor, ThreatDown ThreatDown (https://www.threatdown.com/products/managed-detection-and-response/?utm_medium=referral&utm_source=ciso&utm_content=security_you_should_know) delivers elite Managed Detection and Response purpose-built for resource-constrained teams with high-efficacy protection without complexity. Combining artificial intelligence and expert analyst judgment, ThreatDown intercepts sophisticated attacks with speed and accuracy, scaling security effortlessly. Recognized by MRG Effitas, AVLab, and G2, ditch fragmented tools for fast, 24/7 protection without overhead.

ALT: Embarrassed Stephen Colbert

Jason Elrod and Chris Ray break down the zero-click Grok and Gemini attack, reframing AES-encrypted prompt injection as a provenance and trust-boundary failure rather than a content filtering one. If a model can decrypt untrusted input and drive a tool call that reaches chat history or email, is your guardrail even the control boundary anymore? Big thanks to our sponsor, ThreatDown! Join us next time — LIVE every Friday at 4 PM ET / 1 PM PT: https://youtube.com/live/u6wpjCkAWzc?feature=share #cybersecurity #cybersecuritynews #infosec #news #informationsecurity

Manchester Airports Group suffers cyber incident ATF suffers data breach Clothing retailer Carhartt suffers data breach Get the show notes here: https://cisoseries.com/cybersecurity-news-manchester-airports-breach-atf-agency-breach-clothier-carhartt-breach/ Huge thanks to our episode sponsor, ThreatDown (https://www.threatdown.com/products/managed-detection-and-response/?utm_medium=referral&utm_source=ciso&utm_content=cyber_security_headlines) SMBs face enterprise-level, AI-driven threats every day, often sacrificing robust security in favor of operational agility. You don't have to choose between moving fast and staying protected. ThreatDown (https://www.threatdown.com/products/managed-detection-and-response/?utm_medium=referral&utm_source=ciso&utm_content=cyber_security_headlines) bridges the expertise gap, replacing fragmented, legacy tools with proactive, 24/7 MDR that scales with your business. ThreatDown (https://www.threatdown.com/products/managed-detection-and-response/?utm_medium=referral&utm_source=ciso&utm_content=cyber_security_headlines) . Enterprise-grade defense. Built for businesses like yours.

China contractor hack hits US agencies Ring throws away the key Boston Scientific feels cyber pain Get the show notes here: https://cisoseries.com/cybersecurity-news-august-27-2026/ Huge thanks to our episode sponsor, ThreatDown (https://www.threatdown.com/products/managed-detection-and-response/?utm_medium=referral&utm_source=ciso&utm_content=cyber_security_headlines) SMBs face enterprise-level, AI-driven threats every day, often sacrificing robust security in favor of operational agility. You don't have to choose between moving fast and staying protected. ThreatDown bridges the expertise gap, replacing fragmented, legacy tools with proactive, 24/7 MDR that scales with your business. ThreatDown. Enterprise-grade defense. Built for businesses like yours.