Security
-
Oct 22, 2026
Security Update on PHP2Shell: Impact for Docker Customers
On Tuesday, October 20, 2026, Docker began tracking two critical vulnerabilities in PHP, CVE-2026-109618 and CVE-2026-109619, commonly known as PHP2Shell.
Docker SecurityRead now
-
Oct 16, 2026
From Containers to Sandboxes: Developer Trust in the Agentic Era
The 2026 Stack Overflow Developer Survey shows only 7% of developers trust AI output for important decisions. Here’s what that means for running agents safely.
Terri AvnaimRead now
-
Oct 12, 2026
Docker Hub security advisory: personal access tokens transferred during account-to-organization conversions
CVE-2026-105445: Docker Hub account conversion could re-assign personal access tokens to a new owner. Read what happened, who was affected, and the fix.
Mark LechnerRead now
-
Oct 1, 2026
Trust Docker for the agents you don’t
At WeAreDevelopers, Docker introduced Cloud Sandboxes, the open Sandbox Kit specification, and a commitment to bring Kits to the CNCF for neutral governance.
Docker TeamRead now
-
Aug 31, 2026
Secure by default is your only way forward
The newest worker on your team builds with whatever it finds and never asks what deserves your trust. Our answer is a hardened foundation and a boundary built for agents.
Vishrut IyengarRead now
-
Aug 25, 2026
Moving from Minimus to Docker Hardened Images
The Minimus registry goes offline on October 22. Here is the migration path, the free help Docker is offering, and where to start.
Vishrut IyengarandRanti FamilusiRead now
-
Aug 24, 2026
MinIO End of Life: How to Stay Patched and Audit-Ready with Docker ELS
MinIO reached end of life in February 2026. Docker Extended Lifecycle Support (ELS) keeps end-of-life software like it patched, compliant, and audit-ready for up to five years, covering versions upstream no longer supports all the way up to entire projects.
Vishrut IyengarRead now
-
Aug 18, 2026
17,600 Actions: Agent Security Is a Systems Problem
The OpenAI/Hugging Face incident exposed a new challenge for AI agent security. 17,600 attacker actions show why AI agent security can’t rely on human review. Explore the controls needed to constrain, observe, and govern agents at speed.
Mark CavageRead now
-
Aug 17, 2026
Make zero CVEs your new default
Supply-chain attacks have kept escalating while AI writes more of the code you ship. Docker’s latest updates bring more software built from source into your images, keep security coverage running past end of life, carry every guarantee through your customized images, and move policy enforcement onto every developer machine.
Vishrut IyengarRead now