Hackers Turn an Open-Source AI Agent Into a Tool for Controlling Compromised Docker Servers
CARBONATO botnet hijacks exposed Docker servers and uses Hermes Agent for operator control.
74
Vendor
Nous Research
- Mentions · 7d0
- Mentions · 30d0
- All mentions7
- First seenSep 3, 2026
- Last mentionedSep 28, 2026
Timeline
7 articles · newest firstBlackHatSect0r Uses DeepSeek-Powered AI Agent to Automate Attacks and Harvest 16,834 Credentials
SOCRadar linked the BlackHatSect0r crew to a DeepSeek-powered AI agent that automated scanning and harvested 16,834 credentials from exposed systems.
63
BlackHatSect0r Hackers Disable AI Safety Controls to Automate Credential Theft and Cyberattacks
French-speaking crew BlackHatSect0r disabled AI agent safety controls to automate scanning, credential harvesting, and vishing, exposing 16,834 stolen credentials.
62
Hackers Turn AI Agent Into a Cyber Weapon After Deleting Its Safety Refusals
Researchers exposed BlackHatSect0r && DXQRTXX infrastructure showing a safety-disabled Hermes AI agent used to automate scanning, credential harvesting, and vishing against French telecom subscribers.
60
Nous Research Adds One-Click Local Model Setup to Hermes Desktop
Nous Research's Hermes Desktop now offers one-click local model setup that reads hardware, picks a fitting quantization, downloads weights, and configures llama.cpp automatically.
25
AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks
Researchers found 120 corporate llms.txt files pointing to unregistered packages, demonstrating AI coding agents install and execute attacker-controlled code on Fortune 500 networks.
65
Sparks Fly: NVIDIA Accelerates Local AI at IFA 2026
NVIDIA announces local AI push at IFA 2026 with faster llama.cpp/vLLM inference, PAIR routing tool, and October RTX Spark PCs.
55
Related CVEs
by mentions- CVE-2026-425306%9.2NGINX Open Source has a vulnerability in the ngx_http_v3_module module
Appears with
- DeepSeekai model · 3
- Hermesai model · 3
- Hermes agentproduct · 3
- Nous Researchorganization · 3
- DXSCANproduct · 3
- DXQRTXXthreat actor · 2
- Socradarorganization · 2
- NGINXvendor · 2
- BlackHatSect0rthreat actor · 2
- DeepSeekvendor · 2
- Hermesproduct · 2
- GLM-5.3-Flashai model · 1
- Anthropicorganization · 1
- Dockervendor · 1
- llama.cppproduct · 1
- Qwen3.8-27Bai model · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.