Docker

Facts we checked

Each fact was checked against the page it links to.

• It spreads by scanning for Docker hosts with an API exposed on port 2375 without authentication.

  CARBONATO: a botnet built around an AI agent · ThreatDown (Malwarebytes) · archived copy · checked 28 Sep 2026 · Cite this fact · the story

• Docker introduced Cloud Sandboxes on 24 September 2026

  Introducing Cloud Sandboxes: Start on Your Laptop, Finish in the Cloud · Docker · archived copy · checked 25 Sep 2026 · Cite this fact · the story

• Docker Sandboxes run AI coding agents in isolated environments on your machine or on Docker-managed cloud infrastructure

  Docker Sandboxes documentation · Docker · archived copy · checked 25 Sep 2026 · Cite this fact · the story

All 2 stories

• 28 Sep ResearchThreatDown says the CARBONATO botnet installs an unmodified Hermes Agent and targets AI API keys first.
• 25 Sep Agents and appsDocker adds cloud sandboxes so coding agents run off the laptop

Cases

Ongoing case: Sandboxes for coding agents

Its own pages

Pages the company published that our stories cite.

• Docker Sandboxes documentation · docs.docker.com