Matthias Knäpper

From Containers to Sandboxes: Developer Trust in the Agentic Era/#docker #container - What the 2026 Stack Overflow Developer Survey tells us about where trust goes next If you’ve followed Docker lately, you know we’re all-in on sandboxes.We’ve... https://tinyurl.com/26lsdfrt

AI Agent Security Risks: What Can Go Wrong When Agents Act on Their Own/#docker #container - The thing that makes an AI agent useful, its freedom to act, is also what can introduce risk.An agent doesn’t just answer a question, it browses, runs code,... https://tinyurl.com/22szoyke

Harbor Docker Sandboxes: Run Safe, Reproducible Agent Evals/#docker #container - Key takeaways Harbor can now run every eval task in Docker Sandboxes Docker Sandboxes are MicroVM environments to run agents like Claude Code, Codex, Cursor, and more... https://tinyurl.com/239rze22

Trust Docker for the agents you don’t/#docker #container - Cloud Sandboxes, open Kits, and a developer community building the next generation of AI software Docker Cloud Sandboxes are here. At WeAreDevelopers World Congress North America, we launched... https://tinyurl.com/267fubnf

Manufacturing Trust for AI Agents | Docker’s WeAreDevelopers Keynote/#docker #container - Coding agents do more than write code.Agents can install dependencies, access networks, use credentials, and keep working after we’ve moved on to something... https://tinyurl.com/2cf9sabm

Introducing Cloud Sandboxes: Start on Your Laptop, Finish in the Cloud/#docker #container - Run agents on your laptop, in the cloud, and move between them with one command, all safely.Earlier this year, we launched Docker Sandboxes:microVM environments... https://tinyurl.com/2cb8pwvk

Meet the Ecosystem: Partners and Customers at WeAreDevelopers with Docker/#docker #container - As teams put AI agents to work, they need to move quickly without losing control of what they deploy.They’re combining models, tools, and infrastructure... https://tinyurl.com/23zgot4d

6 Benefits of Sandbox Environments (and How Docker Sandboxes Delivers Them)/#docker #container - In our State of Agentic AI report, 60% of organizations reported having AI agents running in production.Those agents install packages, run scripts, and call... https://tinyurl.com/2brshac2

YOLO Mode: Agent Autonomy Without the Guardrails/#docker #container - AI agents have come a long way in both capability and everyday use since generative AI went mainstream in late 2022.In Stack Overflow’s 2025 Developer Survey, 84% of developers said... https://tinyurl.com/27upkh9v

Below the Harness: Governing a Multi-Model, Multi-Harness World/#docker #container - We believe the future is a multi-model, multi-harness world.And we think it needs a new trust model. In 1988, Norm Hardy described a problem that had been quietly... https://tinyurl.com/2bnncylg

Docker VMM Public Beta: A Complete Overhaul, Built for Performance/#docker #container - Today we’re announcing the public beta of a fully rebuilt Docker VMM:a new first-party virtualization layer underneath Docker Desktop, optimized for containers,... https://tinyurl.com/292e4nrs

A new security baseline for enterprise agentic adoption/#docker #container - Agent Baseline is a blueprint for AI adoption that defines six security outcomes for putting enterprise agents to work without giving them unchecked authority. Consider this... https://tinyurl.com/2y3clxas

Governance Is a Developer Experience Problem/#docker #container - This is the third post of a 3-part series by Docker Captain Karan Verma.Catch up on Part 1:Your Laptop Is the New Production Environment and Part 2:Runtime Enforcement, Not Runtime... https://tinyurl.com/2bzj5lcl

Runtime Enforcement, Not Runtime Advice/#docker #container - In Part 1, we explored why traditional security models struggle with autonomous agents.As developers begin delegating more work to AI systems, a growing amount of activity happens outside... https://tinyurl.com/25t7ymxb

Agentic AI Needs Guardrails, Not Guesswork/#docker #container - What does it take to secure AI agents without slowing developers down?A recent panel explored the answer I recently joined Zach Lloyd, founder and CEO of Warp;Gavriel Cohen, co-founder and... https://tinyurl.com/27cd6ge7

Coding Agent Horror Stories: The Agent That Deleted Production/#docker #container - In Part 1, we walked through six categories of AI coding agent failures and why they keep happening.The agent runs as you, with your filesystem permissions and your... https://tinyurl.com/287mfyvn

IBM WebSphere Application Server is affected by a cross-site request forgery vulnerability (CVE-2026-8408) https://tinyurl.com/2bxx5qna

IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability due to Eclipse Parsson (CVE-2026-9563) https://tinyurl.com/28zgs9bh

Your Laptop Is the New Production Environment/#docker #container - A few years ago, the most powerful AI tools in a developer’s workflow helped write code.Today, they can do much more.It’s increasingly common to hand an AI agent a task like: Read... https://tinyurl.com/28sm2f3t

Automating IBM Storage FlashSystem Tasks with REST APIs, PowerShell, Scripting, and Ansible https://tinyurl.com/257dkh94

Why AI Agents Need Isolation/#docker #container - AI coding agents are quickly becoming part of everyday development workflows.Today, AI tools can write and execute code, install dependencies, debug repositories, interact with APIs, automate terminal... https://tinyurl.com/25orkewh

What Does EU AI Act Compliance Require?/#docker #container - For teams building AI-governed systems, the EU AI Act adds compliance obligations to every stage of the development lifecycle, from documenting training data to reporting incidents in... https://tinyurl.com/242sg4z3

IBM FlashCore Module (FCM) Product Guide: Evolution of IBM FlashCore Technology and FCM5 Enhancements https://tinyurl.com/2y2hp3rx

IBM WebSphere Application Server is affected by a remote code execution vulnerability (CVE-2026-9319) https://tinyurl.com/29az3z3e

Docker Content Trust: Retirement and Migration Guidance/#docker #container - TLDR:Docker Content Trust (DCT) and the Notary v1 service at notary.docker.io are being fully retired (first announced in July of 2025).This blog explains what is changing, who... https://tinyurl.com/22aa4aqd

PH71556:IBM WebSphere Application Server is affected by server-side request forgery (CVE-2026-9006) https://tinyurl.com/2bfw79bm

IBM WebSphere Application Server is affected by server-side request forgery (CVE-2026-9006) https://tinyurl.com/22rg43qt

PH71370:IBM WebSphere Application Server is affected by multiple vulnerabilities (CVE-2026-8646, CVE-2026-9320, CVE-2026-9071) https://tinyurl.com/2y9moegl

PH71631:IBM WebSphere Liberty is affected by multiple vulnerabilities (CVE-2026-8646, CVE-2026-9320, CVE-2026-9071) https://tinyurl.com/24v2k8oz

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using the Web Server Plug-ins (CVE-2026-9072, CVE-2026-8858, CVE-2026-10852) https://tinyurl.com/29el6xts

IBM HTTP Server latest cumulative security interim fix https://tinyurl.com/2b66fzmt

PH71342,PH71376:MULTIPLE VULNERABILITIES IN THE WEBSPHERE WEBSERVER PLUG-IN https://tinyurl.com/299gyyof

WebSphere Application Server Liberty 26.0.0.6 https://tinyurl.com/23kelau9

WebSphere Application Server traditional Version 9.0.5.28 https://tinyurl.com/297ekm6t

Evolution of IBM FlashCore Technology and FCM5 Enhancements https://tinyurl.com/26mph6al

Cyber Resiliency and Scanning with IBM Storage Sentinel powered by Index Engines CyberSense https://tinyurl.com/2cys2c5f

Docker joins the Athena coalition: a cross-industry collaboration for supply chain security/#docker #container - The obvious takeaway from 2026’s biggest incidents is that attackers are increasingly using AI to move fast.Docker’s CISO, Mark Lechner,... https://tinyurl.com/2dq3gwzv

PH70847: UPDATE API DISCOVERY DEPENDENCIES https://tinyurl.com/2bxpx5gz

PH71590:IBM WEBSPHERE APPLICATION SERVER IS VULNERABLE TO IDENTITY SPOOFING (CVE-2026-8644) https://tinyurl.com/29tpcwvy

SANITIZE CONTEXTID PARAMETER IN RELIABLE MESSAGING COMPONENT https://tinyurl.com/2b8z8v7o

THE AUTHENTICATION CALL IS TRIGGERING TOKEN VALIDATION MULTIPLE TIMES AND THROWING MULTIPLE EXCEPTIONS. https://tinyurl.com/242tmo7j

Base64 module in jython includes " " and "/" character irrespective of defined alternate characters. https://tinyurl.com/222lgglt

PH70821: SENSITIVE INFORMATION IN FFDC https://tinyurl.com/235pjw7g

Docker Hardened Images enhanced vulnerability scanning with Docker and Aikido/#docker #container - Aikido now scans Docker Hardened Images (DHI) with built-in VEX support.Vulnerabilities that Docker has verified as non-exploitable drop out of the queue... https://tinyurl.com/285btw3j

PH69349: JAVA.LANG.NULLPOINTEREXCEPTION IN TPVNAVTREE.JSP https://tinyurl.com/24an5ncu

5 Software Supply Chain Security Best Practices for Development Teams/#docker #container - Understanding software supply chain security is one thing.Putting it into practice across a real pipeline, with real deadlines and real constraints, is... https://tinyurl.com/2a2wcscj

Addressing processing of archives with negative offsets in Tarfile Jython Module https://tinyurl.com/22h5aq8f

PLUGIN-CFG.XML FILE GENERATED WITH THE GenPluginCfg.sh COMMAND FAIL DUE TO ASM JAR FILENAME CHANGE https://tinyurl.com/27mouhpm

IBM Redbooks | Context Without Limits: A High-Performance KV Cache Platform for Large-Scale AI Inference https://tinyurl.com/2cuc7mvy

What is AI Governance? Frameworks, Principles, and Best Practices/#docker #container - AI agents are moving fast.According to our State of Agentic AI report, 60% of organizations already have AI agents in production, yet 40% cite security and compliance... https://tinyurl.com/26bml29c