security
-
Trusted Foundation Oct 23, 2026
PHP2Shell and eMudhra Patched
PHP2Shell and the eMudhra certificate compromise landed in the same week. Docker published a fixed PHP image within 24 hours and rebuilt the trust store across the catalog.
Vishrut IyengarRead now
-
Oct 16, 2026
From Containers to Sandboxes: Developer Trust in the Agentic Era
The 2026 Stack Overflow Developer Survey shows only 7% of developers trust AI output for important decisions. Here’s what that means for running agents safely.
Terri AvnaimRead now
-
Oct 14, 2026
AI Agent Security Risks: What Can Go Wrong When Agents Act on Their Own
Learn the top AI agent security risks, from prompt injection to excessive autonomy and credential exposure, and how to contain them.
Eric JiaandSrini SekaranRead now
-
Oct 12, 2026
Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions
CVE-2026-105445: Docker Hub account conversion could re-assign personal access tokens to a new owner. Read what happened, who was affected, and the fix.
Mark LechnerRead now
-
Oct 1, 2026
Trust Docker for the agents you don’t
At WeAreDevelopers, Docker introduced Cloud Sandboxes, the open Sandbox Kit specification, and a commitment to bring Kits to the CNCF for neutral governance.
Docker TeamRead now
-
Sep 24, 2026
From Dockerfile to Kit: the Docker Sandboxes Kit Specification
Docker’s Sandbox Kit Specification v3 packages an AI agent’s network rules, credentials, and volumes as an ordinary, pinnable OCI image.
Christian DupuisRead now
-
Sep 3, 2026
YOLO Mode: Agent Autonomy Without the Guardrails
YOLO mode lets an AI agent run without asking permission. Learn what it is, why it’s risky, and how to run it safely.
Eric JiaandSrini SekaranRead now
-
Aug 31, 2026
Secure by default is your only way forward
The newest worker on your team builds with whatever it finds and never asks what deserves your trust. Our answer is a hardened foundation and a boundary built for agents.
Vishrut IyengarRead now
-
Aug 18, 2026
17,600 Actions: Agent Security Is a Systems Problem
The OpenAI/Hugging Face incident exposed a new challenge for AI agent security. 17,600 attacker actions show why AI agent security can’t rely on human review. Explore the controls needed to constrain, observe, and govern agents at speed.
Mark CavageRead now