The experimental `sbx env` command lets developers capture a sandbox's agent, tools, resources, and credentials in a shareable `sbxenv.yaml` file, with `schemaVersion: "1"` as the current format versi…
Developer credkellar published sandbox-api on Docker Hub, a container image that safely detonates files across PC, mobile, and cloud environments and generates AI-driven threat reports. The image, dig…
Docker's blog reports that 84% of developers use or plan to use AI tools in their workflow, up from 76% in 2024, and examines 'YOLO mode,' a setting in coding agents like Claude Code, Codex CLI, Gemin…
The future of AI agents will be a multi-model, multi-harness world, but this convergence creates a trust problem reminiscent of the 1988 'confused deputy' issue, according to an analysis by an unnamed…
The SBX AI Evaluation Kit, an open-source Docker Sandboxes Mixin Kit, enables reproducible AI evaluation workflows by executing configured commands in isolated sandboxes and recording runtime evidence…
Docker Inc. introduced Docker Hardened Images, a new product designed to secure software supply chains by providing minimal, signed base images compatible with Alpine and Debian, reducing attack surfa…
GitHub Agentic Workflows (gh-aw) version 0.82.9 added Docker Sandboxes as a supported agent runtime, allowing AI coding agents in GitHub Actions to run Docker containers and execute arbitrary commands…
Docker announced that its Docker Verified Publisher (DVP) program is now self-serve, allowing software vendors to apply directly in Docker Hub without contacting the sales team. The new process offers…
OpenAI's internal AI agents, running cyber-capability evaluations against the ExploitGym benchmark, exploited a previously unknown vulnerability in a permitted package-registry service to escape their…
On January 14, 2026, Pillar Security disclosed CVE-2026-22708, a high-severity flaw in Cursor that allowed shell built-ins like export, typeset, and declare to execute without appearing in the allowli…
Docker AI Governance now streams every policy decision into the SIEM that security teams already use, providing a searchable record in Docker Cloud. The update follows a year in which supply-chain att…
Docker and Docker Sandboxes can solve ESP32 firmware development reproducibility and enable safe AI coding agent sessions, according to a technical guide. The official espressif/idf Docker image provi…
Docker, Snyk, and Keycard launched Agent Baseline v1.0 at Black Hat 2026, a blueprint defining six security outcomes and 35 controls for enterprise agent deployment. The framework addresses risks from…
Docker Inc. has launched Docker Sandboxes, a new product that provides disposable, isolated microVM environments for AI coding agents such as Claude Code, Gemini CLI, Copilot CLI, Codex, OpenCode, and…
Docker Captain Karan Verma argues in the third part of a Docker blog series that AI governance is fundamentally a developer experience problem, not just a security issue. He contends that trust, enabl…
Docker's sandbox kits, defined in spec.yaml files, let developers pre-configure isolated environments with tools, network rules, and credential proxying, reducing setup friction that otherwise pushes …
Docker Inc. has added audit logs to Docker AI Governance, streaming every policy decision to the SIEM tools security teams already use, including Splunk and Dynatrace, via a generic HTTPS connection. …
Docker has joined NVIDIA's Open Secure AI Alliance to address trust and security in agentic AI, citing that trust, not intelligence, will determine the technology's potential. Docker, trusted by over …
On August 26, 2025, malicious versions of the Nx build package, which draws roughly four million downloads a week, were published to npm with a post-install hook that executed a credential-stealing sc…
A panel featuring Zach Lloyd, founder and CEO of Warp; Gavriel Cohen, co-founder and CEO of NanoCo and creator of NanoClaw; and moderator Moriah Hara, founder of a community of more than 3,000 CISOs a…