3 verified briefings on Docker. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
Docker is retiring its original Content Trust (DCT) feature and the Notary v1 service. This change requires developers and security teams to migrate to modern tools to continue verifying the integrity and publisher of their container images.
As Docker and Kubernetes become standard for modern infrastructure, attackers are developing sophisticated new methods to compromise them. Research highlights a growing trend of attacks, from container escapes to complex supply chain compromises, targeting these widely used technologies and the companies that rely on them.
Docker is highlighting critical security failures in the AI coding agent ecosystem. Citing a report that developers use AI in 60% of their work, the company warns that the shift to coordinated agent teams is creating new vulnerabilities for developer infrastructure.