Technology News
Articles and updates on web development, tooling, and programming languages.
Docker Sandboxes vs. Containers: Choosing the Right Isolation for AI Agents
Docker Blog reports: A container shares the host kernel. Docker Sandboxes are microVMs with their own kernel and private Docker Engine. See how they differ and when to use each.
Docker and ActiveState Extending Secure Defaults to the Packages Developers Install
Docker Blog reports: Docker partners with ActiveState to continue to provide one standard for trusted content across everything you and your teams build on.
Daybreak Red is now available in AWS GovCloud (US-East)
OpenAI News reports: Daybreak Red brings GPT-5.6 Cyber to approved customers in AWS GovCloud (US-East) through Amazon Bedrock for authorized cybersecurity work.
Where should your code live in a Docker Sandbox?
Docker Blog reports: Docker Sandboxes support three ways to organize an agent’s code: shared mounts, Git worktrees, and clone mode. Here’s how to choose between them.
The Ecosystem is the Answer: Docker, the Blueprint Alliance, and the Importance of Collaboration in the Agentic Era
Docker Blog reports: Docker is a founding member of the Blueprint Alliance, a 12-company reference architecture for securing AI agents, built around four governance questions.
Win the Agentic Era, Together: Introducing the Docker Navigator Partner Program
Docker Blog reports: Docker is launching the Navigator Partner Program, with three tiers, co-selling benefits, and a new incentive for every registered AI governance deal.
Orchestrating SageMaker AI endpoint auto scaling with AWS CDK
AWS Machine Learning Blog reports: Updating a SageMaker AI endpoint that has Application Auto Scaling registered makes AWS CloudFormation and AWS CDK deployments fail. This post shows how to build a reusable AWS CDK construct with CloudFormation custom resources that deregisters and re-registers aut…
Security Update on PHP2Shell: Impact for Docker Customers
Docker Blog reports: On Tuesday, October 20, 2026, Docker began tracking two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, commonly known as PHP2Shell.
Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions
Docker Blog reports: CVE-2026-105445: Docker Hub account conversion could re-assign personal access tokens to a new owner. Read what happened, who was affected, and the fix.
Inside Hyperdrive: How we solved a rare Hyperdrive MySQL caching bug
Cloudflare Blog reports: While adding MySQL support to Hyperdrive, we found a subtle protocol bug when caching query results. Here is how we tracked down a 0.001% rate error and made Hyperdrive MySQL generally available.
Why Is My Kubernetes Job Still Pending? Tracing Kueue Admission with Headlamp
Kubernetes Blog reports: You submit a Kubernetes Job and wait for its Pods to appear. A minute passes. Then another. The Job is still suspended, there are no application logs, and there may not even be a Pod to inspect. In a cluster managed by Kueue, this can be completely normal. Kueue may still be…
Harbor + Docker Sandboxes: Run Safe, Reproducible Agent Evals
Docker Blog reports: Harbor can now run every eval task in Docker Sandboxes Docker Sandboxes are MicroVM environments to run agents like Claude Code, Codex, Cursor, and more safely With Sandboxes, define custom network policies for fair, reproducible evals Run your evals locally or in the cloud: sta…