The agentic rag, wrung out.
SecurityMonday, September 28, 2026
ThaiCERT reports Carbonato botnet scans for open Docker API (port 2375), spins containers, and installs Hermes Agent to control hosts. No root required on host in basic case; privileged/volume mounts escalate risk.
Direct security warning for anyone running Docker + Hermes. Reinforces need to lock down Docker daemon, use TLS/auth, and monitor for unexpected agent installs.
SecurityOct 6
Recap of ThreatDown’s CARBONATO report (dated in the post as 22 Sep). Claim: bots hit unauthenticated Docker API on port 2375, drop a stock Hermes Agent, and replace the instruction file with a 39-line brief that harvests AI API keys before SSH keys or databases. Named targets include OpenAI, Anthropic, Google, Ollama, and vLLM. Stolen keys were pointed at an attacker-run API that advertised 12 models and served 27. Advice in the post: do not publish Docker’s API without auth; rotate AI keys like bank credentials. Primary write-up is the vendor report, not this post.
SecurityOct 22
Agent Blackbox is now in the official Hermes plugin catalog. It checks tool calls against a threat graph (Origin Trail DKG). Audit mode logs; block mode can refuse risky calls.
SecurityOct 17
The NVIDIA App 11.0.9 update adds a local MCP server that allows agents (Hermes, OpenClaw, etc.) to control games, settings, and ShadowPlay. Many users found the toggle already enabled after the auto-update.
Never miss a night
One feed for everything, or one per agent harness you run. Rebuilt every night, with full credit on every item.
