GitHub Agentic Workflows (gh-aw) version 0.82.9 added Docker Sandboxes as a supported agent runtime, allowing AI coding agents in GitHub Actions to run Docker containers and execute arbitrary commands…
Palo Alto Networks found machine identities now outnumber humans 109 to 1, with roughly 79 in every 100 being AI agents, and 37% of organizations can revoke an agent's credentials while 30% have immut…
On January 14, 2026, Pillar Security disclosed CVE-2026-22708, a high-severity flaw in Cursor that allowed shell built-ins like export, typeset, and declare to execute without appearing in the allowli…
A new guide outlines five practical steps to secure software supply chains, including sandboxing AI agents with Docker Sandboxes, freezing dependencies with a five-day cooldown, using hardened multi-s…
A developer introduced SIP, a set of five immediate software supply chain controls for technical leaders, covering AI agent isolation, dependency freezing, hardened container builds, SBOM generation, …
Docker Sandboxes now allow Claude Code and Codex coding agents to run with full autonomy inside isolated microVMs, reducing the risk of granting --dangerously-skip-permissions or --dangerously-bypass-…
Docker Sandboxes is a local developer-workstation tool that mounts the user's filesystem and runs microVMs on their own hardware, while E2B and Cloudflare Sandbox SDK are cloud-hosted, API-driven serv…
Docker Inc. launched Docker Sandboxes, a new product that isolates AI coding agents in microVMs with their own kernels and private Docker daemons, rather than containers, to make bypass-mode agents sa…
Docker announced general availability of Docker Sandboxes on January 30, 2026, a microVM-based runtime for AI coding agents that wraps tools like Claude Code in disposable environments with a credenti…
A security analysis of Docker Sandboxes v0.37.1 reveals that the default 'Balanced' network profile allows egress to any subdomain of wildcard domains like *.amazonaws.com, *.githubusercontent.com, an…
Docker's sandbox kits, defined in spec.yaml files, let developers pre-configure isolated environments with tools, network rules, and credential proxying, reducing setup friction that otherwise pushes …
At AI DevCon London, a Docker engineer demonstrated why prompt-level guardrails are insufficient for coding agents, advocating for isolated microVM environments like Docker Sandboxes. The talk highlig…
On August 26, 2025, malicious versions of the Nx build package, which draws roughly four million downloads a week, were published to npm with a post-install hook that executed a credential-stealing sc…
A panel featuring Zach Lloyd, founder and CEO of Warp; Gavriel Cohen, co-founder and CEO of NanoCo and creator of NanoClaw; and moderator Moriah Hara, founder of a community of more than 3,000 CISOs a…
A new installment of the 'Build a Basic AI Agent From Scratch' series introduces Docker sandboxing, prompt-injection defenses, and schema validation to close security gaps left by human-in-the-loop co…
Code Airlock, a new open-source tool, lets developers run coding agents like Claude Code and Codex inside disposable microVMs to prevent direct host access while allowing agents to install packages an…
Docker introduced Docker Sandboxes in April, a new container isolation method using microVMs designed specifically for running AI agents. The microVMs provide each container with its own isolated Dock…