Docker Security

Docker security encompasses the practices and technologies used to protect containerized applications and the Docker platform itself from vulnerabilities and unauthorized access. This matters for AI governance because machine learning models and inference engines are increasingly deployed in Docker containers, making container security critical for protecting proprietary algorithms and training data. Organizations must implement proper image scanning, runtime monitoring, and access controls to ensure that AI workloads maintain the integrity and confidentiality required for regulated environments.

1 item

ResearchGlobal2026-09-24

Carbonato Malware Turns AI Agent Frameworks Into Attack Infrastructure

A new malware campaign named Carbonato targets exposed Docker daemon APIs to install the Hermes Agent AI framework on compromised hosts. The deployed agent, configured as a persona called GH0ST, accepts operator commands via Telegram, autonomously writes terminal commands, and harvests AI API keys and credentials. Malwarebytes ThreatDown identified the campaign as an active, global threat to enterprise AI infrastructure.

Carbonato Hermes Agent AI agent abuse malware credential theft Docker security agentic AI API key security