[hermes-agent]

September 24, 2026

• CARBONATO wires an off-the-shelf agent framework into a Docker botnet. ThreatDown found an unauthenticated Docker registry exposed since May; one day of passive, read-only collection yielded 59 repositories, 234 image tags, 605 verified blobs and 4.3 GB of images spanning October 2024 to August 2026. The implant targets daemons exposed on port 2375, installs the MIT-licensed Hermes Agent unchanged, then overwrites its SOUL.md persona with a 39-line prompt telling it to take tasks over Telegram, persist and collect credentials — the same framework and persona file seen in the card-skimming operation reported this week (ThreatDown) (earlier coverage). · AI-Enabled Threat Activity

in The Exploit Is Public, the Ubuntu Patch Isn't