#docker
-
Carbonato malware turns AI agents loose on exposed Docker hosts
A new worm-like botnet hijacks unprotected Docker daemons and deploys the GH0ST AI agent, which runs operator commands and harvests credentials.
-
25 Minutes to Admin Access: How an AI Agent Found a Live Baseten GitHub Token
Strix was vetting the inference provider Baseten before entrusting it with the company's data — and its autonomous agent obtained a token with admin rights to key repositories in 25 minutes.
-
Omarchy: any user process could get root without a password
In the Omarchy distribution, the default standard user was placed in the docker group, opening a path to root access for any process in the session. The issue was fixed in version 4.0.1.
-
Docker Unveils Sandboxes — Disposable Isolated Environments for AI Agents
Docker has announced Docker Sandboxes — disposable, isolated sandboxes designed for running AI agents. The product sparked notable discussion on Hacker News.
-
Hackers Are Attacking a Critical Vulnerability in the Gitea Docker Image
Attackers are actively exploiting a critical vulnerability in the official Docker image of the self-hosted Gitea service that allows them to impersonate any user, including administrators.