If you’re already familiar with sandboxing as an isolation technique, sandbox security is the next layer:the policies, controls, and enforcement mechanisms that make sure those isolation boundaries actually hold under real-world pressure. According to our State of Agentic AI report, 40% of respondents cite security as the top challenge in scaling agentic AI, and 43% point to increased security exposure from orchestration sprawl.As agents execute code, call APIs, and interact with live infrastructure, a sandbox without strong enforcement is a locked room with an

Just published by Docker: Read more

This is Part 2 of our AI Coding Agent Horror Stories series, an in-depth look at real-world security incidents exposing the vulnerabilities in AI coding agents, and how Docker Sandboxes deliver workspace-scoped isolation that contains the worst failures at the execution layer. In part 1 of this series, we mapped six categories of AI coding agent failures and the architectural reason they keep happening:the agent runs as you, on your filesystem, with your credentials, and nothing sits between the model’s decision and the shell’s execution.

Just published by Docker: Read more

Are in-person tech conferences back in fashion?Or are engineers just willing to travel for fresh baguettes?In this post, I round up a few highlights from KubeCon Europe 2024, held March 19-24 in Paris. My last KubeCon was in Detroit in 2022, when tech events were still slowly recovering from COVID.But KubeCon EU in Paris was buzzing, with more than 12,000 attendees!I couldn’t even get into a few of the most popular talks because the lines to get in wrapped around

Just published by Docker: Read more

Continuous learning is a necessity for developers in today’s fast-paced development landscape.Docker recognizes the importance of keeping developers at the forefront of innovation, and to do so, we aim to empower the developer community with comprehensive learning resources.

Docker has taken a multifaceted approach to developer education by forging partnerships with renowned platforms like Udemy and LinkedIn Learning, investing in our own documentation and guides, and highlighting the incredible learning content created by the developer community, including Docker Captains.

Commitment to developer learning

Just published by Docker: Read more

I have been recently watching The Americans, a decade-old TV series about undercover KGB agents living disguised as a normal American family in Reagan’s America in a paranoid period of the Cold War.I was not expecting this weekend to be reading mailing list posts of the same type of operation being performed on open source maintainers by agents with equally shadowy identities (CVE-2024-3094). As The Grugq explains, “The JK-persona hounds Lasse (the maintainer) over multiple threads

Just published by Docker: Read more