Industry Watch
Latest security news curated for teams running self-hosted infrastructure.
Learn how AI coding agents can expose credentials in supply chain attacks and how Docker Sandboxes keep secrets out of an agent's reach. This is Part 4 of our AI Coding Agent Horror Stories series, a look at real security incidents involving AI coding agents, and how Docker Sandboxes keeps credentia
Read article →
pvcli is a curl-like tool designed to simplify the testing of complex privacy protocols like OHTTP. Debugging privacy-preserving protocols is hard. Oblivious HTTP has several different steps across four different parties, not to mention binary HTTP encoding and details spread across many draft RFCs.
07 / 27 / 2026
Every multi-region setup eventually meets the same awkward moment: a whole cluster goes away, and the identical copy of your service running two regions over might as well not exist, because nothing is wired to treat... Every multi-region setup eventually meets the same awkward moment: a whole clust
07 / 27 / 2026
In case you missed it: OpenTelemetry (OTel) has officially achieved CNCF graduated status! It now stands proudly alongside amazing open source projects such as Kubernetes and Prometheus, to name just a few. It’s been a long journey, and we’re very... In case you missed it: OpenTelemetry (OTel)
07 / 24 / 2026Japanese article follows English one. As we all know, AI is advancing from generative AI to agents, driving growing demand for scalable, efficient infrastructure. Kubernetes and the broader Cloud Native ecosystem are becoming increasingly critical foundations... Japanese article follows English one.
07 / 24 / 2026Perhaps you’ve seen something that should sail out of cache get dragged back to the origin by a stray Set-Cookie or Cache-Control, headers that can be difficult to change on the origin itself. Cache Response Rules is the fix, applied at the right time. Today we’re excited to announce Cache Response
07 / 23 / 2026The symptom that made no sense The first time we saw it, we didn’t trust the dashboard. A distributed training job was scheduled and healthy — every pod was running, no crashes, no OOMKills, nothing in... The symptom that made no sense The first time we saw it, we didn’t trust the dashboard. A
07 / 23 / 2026The CNCF Technical Oversight Committee (TOC) has voted to accept Confidential Containers as a CNCF incubating project. About Confidential Containers Confidential Containers addresses the need to protect data in use within cloud native environments. While data... The CNCF Technical Oversight Committe
07 / 22 / 2026
Explore governance at the runtime layer and learn why isolation, policy enforcement, and controlled tool access are becoming foundational for agentic systems. In Part 1 , we explored why traditional security models struggle with autonomous agents. As developers begin delegating more work to AI syste
07 / 22 / 2026Docker brought together enterprise security leaders to tackle agentic AI's biggest challenge: how to govern AI agents without slowing developers down. Here's what they said. What does it take to secure AI agents without slowing developers down? A recent panel explored the answer I recently joined Za
07 / 22 / 2026
Introduction Running a database on Kubernetes is well understood. Running one that survives a complete regional failure, a corrupted control plane, or a severed network requires a fault-resistant architecture. This post walks through how to build... Introduction Running a database on Kubernetes is w
07 / 22 / 2026
Kyverno is a Kubernetes-native policy engine that validates, mutates, and generates resources before workloads reach your cluster, enforcing security and compliance rules as code, without requiring a separate policy language. Enterprise teams running Kyverno policies in... Kyverno is a Kubernetes-na
07 / 22 / 2026We analyzed global HTTP traffic to explore how kickoff times, streaming habits, and hydration breaks reshaped online activity worldwide. From late-night traffic surges to halftime browsing spikes, here is how the world connected during the global tournament. For 96 years, the World Cup has been a gl
07 / 21 / 2026