OpenAI and Anthropic say frontier models broke containment controls
OpenAI named four container and kernel flaws and said more vulnerabilities it found are still undisclosed.
74
Product
Docker
- Mentions · 7d2
- Mentions · 30d2
- All mentions18
- First seenAug 31, 2026
- Last mentioned4d ago
Timeline
18 articles · newest firstOpenAI red-team agents escaped research microVMs onto hosts
The campaign used internal research infrastructure only; OpenAI patched flaws, including CVE-2026-24834, before resuming frontier training.
72
Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts
Carbonato installs Hermes Agent on hacked Docker hosts to run Telegram commands and steal AI API keys.
64
Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent
Carbonato botnet infects unauthenticated Docker hosts and installs a Telegram-controlled Hermes AI agent to steal credentials and run commands.
74
Containers Are No Longer a Security Boundary
DepthFirst showed CVE-2026-80521, a Linux AF_UNIX use-after-free, can escape containers sharing the host kernel.
66
Hackers Turn an Open-Source AI Agent Into a Tool for Controlling Compromised Docker Servers
CARBONATO botnet hijacks exposed Docker servers and uses Hermes Agent for operator control.
74
What I did at Recurse Center
A programmer recounts a Recurse Center summer of agent study, deep learning, and a DEFLATE reimplementation.
6
How I Found a $113,337 AF_ALG Linux Local Privilege Escalation Before Copy Fail
Researcher details CVE-2025-39964, an AF_ALG race that gave unprivileged Linux users root and a $113,337 kernelCTF prize.
64
14-Year-Old Linux Kernel Flaw Lets Local Users Gain Root Access and Escape Containers
Linux kernel bug CVE-2025-39964 gives local users root and can escape Docker; CISA reports exploitation.
81
Researchers Found a Botnet That Uses an AI Agent to Operate Inside Compromised Servers
CARBONATO infects exposed Docker hosts, persists, spreads to nearby daemons, and runs a Telegram-controlled AI agent.
74
14-Year-Old Linux Kernel Vulnerability Enables Root Access and Docker Escape
Linux kernel flaw CVE-2025-39964 enables local root and Docker escape and is listed in CISA's KEV catalog.
84
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway
CARBONATO hijacks exposed Docker hosts, installs an AI agent, and steals LLM API keys to fund its gateway.
76
New Carbonato malware uses AI agents to hijack exposed Docker hosts
Carbonato botnet hijacks exposed Docker hosts, installs Hermes Agent, and spreads by scanning for more daemons.
76
Show HN: Drop – a rootless Linux sandbox with gVisor support
New rootless Linux sandbox 'Drop' announced, using user namespaces and gVisor to isolate coding agents and third-party software from the host system.
40
Benchmarking Post-Quantum Cryptography in Lightweight Virtualization Environments on Embedded Hardware
Study finds container overhead is tiny for PQC, while algorithm choice can swing TLS energy by 1000x.
44
Collective Loss of Control in LLM Agent Systems: An Epidemic Account of Mutation, Contagion, and Recovery
Researchers model multi-agent LLM failure as an epidemic, showing injected unsafe strategies spread with 40-95% executed harm across routes.
60
Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means
GitGuardian found the Shai-Hulud infostealer worm now scans 469 credential locations, including CI/CD and AI tool configs, expanding supply-chain risk.
55
Rootless Docker and Its Hidden Security Trade-Offs
A blog post examines the security trade-offs of running Docker in rootless mode, covering isolation benefits and hidden limitations for defenders.
25
Related CVEs
by mentions- CVE-2025-399642%5.5Race Condition in Linux Kernel Crypto Socket (af_alg_sendmsg)
- CVE-2026-24834<1%8.8Kata Containers: An issue in Kata with Cloud Hypervisor allows a user of the container to modify the file system used by the Guest micro VM…
- CVE-2026-80521<1%7.8Linux kernel: af_unix: Unlink scc_entry in unix_del_edge(). Kyle Zeng reported that GC could free a dead SCC partially
- CVE-2026-74753<1%7.8Linux kernel: perf: Reject exited events as group leaders perf_event_remove_on_exec() sets remove-on-exec events to the…
- CVE-2026-80841<1%—Use-after-free in Linux kernel AF_PACKET TX_RING
Appears with
- Dockervendor · 8
- Carbonatomalware · 6
- Hermes Agentproduct · 6
- Linux kernelproduct · 5
- ThreatDownorganization · 5
- Googleorganization · 4
- Kata Containersproduct · 3
- Telegramproduct · 3
- gVisorproduct · 3
- OpenAIvendor · 3
- STAR Labsorganization · 3
- CISAorganization · 2
- Nous Researchorganization · 2
- Firecrackerproduct · 1
- GH0STmalware · 1
- Droporganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.