Exposed Docker plus a planted Hermes Agent, API keys first

Recap of ThreatDown’s CARBONATO report (dated in the post as 22 Sep). Claim: bots hit unauthenticated Docker API on port 2375, drop a stock Hermes Agent, and replace the instruction file with a 39-line brief that harvests AI API keys before SSH keys or databases. Named targets include OpenAI, Anthropic, Google, Ollama, and vLLM. Stolen keys were pointed at an attacker-run API that advertised 12 models and served 27. Advice in the post: do not publish Docker’s API without auth; rotate AI keys like bank credentials. Primary write-up is the vendor report, not this post.

Credit@Rakhsh_Tech

Cover art for Security: Exposed Docker plus a planted Hermes Agent, API keys first

Why it matters

Hermes is being used as the payload, not attacked as a product bug. Anyone running an agent on a host with a reachable Docker socket is in the blast radius the report describes.

From the source

Post on X@Rakhsh_Tech

Hermes Agent #docker #api-keys #botnet #carbonato #deployment

More Security

SecuritySep 28

Carbonato Malware Targeting Exposed Docker to Install Hermes Agent

ThaiCERT reports Carbonato botnet scans for open Docker API (port 2375), spins containers, and installs Hermes Agent to control hosts. No root required on host in basic case; privileged/volume mounts escalate risk.

Credit@ThaiCERTByNCSA

SecuritySep 22

DigitalOcean Managed Agents Public Preview Explicitly Supports Hermes

DigitalOcean launched Managed Agents in public preview. Users can run Hermes (alongside Claude Code, Codex, OpenCode, LangGraph or custom containers) inside isolated microVMs that pause when idle. Tools are exposed through a single governed Action Gateway / MCP endpoint. One cloud, one bill, persistent state across sessions.

Credit@digitalocean

SecurityOct 29

Tracekit 1.5.0 + Event Horizon: Tamper-Evident Flight Recorder for Agents

Cygnux Labs released Tracekit 1.5.0, a Hermes-compatible plugin that intercepts tool calls (allow/block/hold), signs them into a verifiable hash-chain log (.tkb file), and now visualizes them as an "Event Horizon" map (project / machine / outside world). Blocked calls flare red; held calls wait; egress shows as jets. Includes Proof-Carrying Messages for agent-to-agent claims, A2A gateway, and offline verification. Strong test results on tamper attacks and harmful calls.

Credit@bravish_, @witcheer

Never miss a night

Every pick, delivered to your reader.

One feed for everything, or one per agent harness you run. Rebuilt every night, with full credit on every item.