Security Update on PHP2Shell: Impact for Docker Customers
Summary On Tuesday, October 20, 2026, Docker began tracking two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, commonly known as
ActiveState Partners with Docker to Secure the Open Source in Enterprise Containers
Even security teams that have invested in a hardened base image often can’t say what’s running on top of it.
From baseline to Secure Software Factory: securing the systems that build your software
In July, Docker, Snyk and Keycard published Agent Baseline, an open, vendor-neutral reference architecture that defines security outcomes for running
Your Agent Runs in a Docker Sandbox. Now It Can Join a Team.
Your sandboxed agents just got a team. The official BAND AI kit for Docker Sandboxes is now available at docker.io/bandhq/band-python-kit:latest.
The bridge to agent-scale Git infrastructure
Over the past year, while Git traffic grew exponentially, 99.99999% of the Git repositories on GitHub began living in two
Introducing Agentic Autofix for code and dependencies
Fixing a vulnerability takes more than knowing where it is. You need a change that follows your coding standards and
Azure DevOps available in Microsoft Copilot
The Azure DevOps Plugin is now available in Microsoft Copilot. It brings Azure DevOps directly into Copilot Chat, Cowork, and
Bring Your Own Model to the GitHub Copilot SDK with C#
Hi, I know, I keep coming back to the same theme on this blog: agent harnesses. In Build Your Own
Get Your .NET MAUI App Ready for Xcode 27
Your existing .NET MAUI app builds with Xcode 27, installs on an iPhone running iOS 27, shows its splash screen,
From Containers to Sandboxes: Developer Trust in the Agentic Era
What the 2026 Stack Overflow Developer Survey tells us about where trust goes next If you’ve followed Docker lately, you