Carbonato's AI Agents, Astrana's Spoofed Phone Call, and Who Goes to Jail When the Model Hacks

The Critical Stack · Sep 27, 2026 · 4m

A new botnet called Carbonato is installing a-i agent frameworks on exposed Docker hosts and worming outward, while Astrana tells the s-e-c that attackers simply spoofed its own phone number. Meanwhile, Washington still has no answer for who is liable when an autonomous agent does the hacking — and investors are already funding the runtime controls.