The obvious takeaway from 2026’s biggest incidents is that attackers are increasingly using AI to move fast. Docker’s CISO, Mark Lechner, wrote about this shift and what every engineering team should do now.
What worries us is that the bar is about to drop further. For most of the last decade, finding a serious vulnerability in widely used open source took time and specialized skill. Frontier models now read code, reason across dependencies, and surface novel, chained vulnerabilities at machine speed, including flaws that survived years of expert review. Anthropic’s Mythos, and the more powerful models that follow it will find more vulnerabilities, faster, and by a wider margin than skilled humans could. The gap between a vulnerability being discovered and exploited has shrunk from years to hours, and a growing share are weaponized before they are ever public.
We believe the durable response in this reality is twofold: build products that are secure and transparent by default, and collaborate deeply across the ecosystem to share signals and intelligence. No single vendor sees the whole picture, and customers are best protected when supply chain technologies work together rather than in isolation.
Secure-by-default tools for devs, as AI embeds into the SDLC
As coding agents take on more of the software lifecycle, secure defaults have to cover more than what you build with. They have to cover where agents run and what they can reach. Today, Docker’s investment spans three areas covering sandboxes for local developers, secure dependencies, and governed access to vetted MCP tools. These capabilities and our upcoming products in the near future collectively help secure the developer environment as AI embeds itself into the SDLC:
Isolated, sandboxed execution for agents: Docker Sandboxes run AI coding agents in isolated microVMs, each with its own kernel, filesystem, and deny-by-default network, so a compromised dependency an agent pulls cannot reach the host, its credentials, or other workloads.
Trusted, open source foundations: Docker Hardened Images Community is free and open source under Apache 2.0. DHI are minimal, low-CVE images rebuilt from source with SLSA Build Level 3 provenance and signed SBOMs, built on Alpine and Debian. The catalog now spans over 3,500 hardened images and tens of thousands of hardened system packages, extending across container images, system packages, Helm charts, and MCP servers. DHI makes secure dependencies the easy, default choice.
Governed access to tools: Docker MCP Catalog and Gateway give agents a trusted, hardened set of MCP servers, plus centralized policy, secret blocking, and audit logging, so the connections agents make are verified rather than assumed.
Together these tools give developers a secure default from the first docker build
through to the agent running in their environment.
Working with the ecosystem on behalf of every developer
The second part of our approach is how we work with the ecosystem. For example, with the axios compromise earlier this year and the TeamPCP campaign, Docker worked with partners including Socket, the Trivy team, Checkmarx, and others to analyze the attacks and contain the blast radius (recap). The damage potential with these attacks could have been very large, however sharing signals across company lines, in real time, is what kept the blast radius relatively small. We have said it before, this is a posture we believe the ecosystem needs more of.
Docker is joining the Athena alliance
Athena is the next step in our journey of collaboration. Announced today, it is an industry coalition for the coordinated defense of open source software in the era of AI-accelerated vulnerability discovery, and Docker is a founding participant. Athena brings together organizations from across the software ecosystem to share findings and coordinate responses before vulnerabilities become public. Docker sits at a distinctive point in the supply chain, with millions of developers relying on us to build, distribute, and run software built on open source, so helping make that ecosystem more resilient is consistent with our mission. We look forward to working with the coalition on key ways in which Docker is uniquely placed to provide expertise and scale to this important cross-industry effort.
Further reading
- Docker Sandboxes
- Docker Hardened Images
- Defending your software supply chain (Docker CISO Mark Lechner)
Facts Only
* Attackers are increasingly using AI to move fast in discovering vulnerabilities.
* Frontier models can read code, reason across dependencies, and surface novel, chained vulnerabilities at machine speed.
* The gap between vulnerability discovery and exploitation has shrunk from years to hours.
* Docker invests in three areas for securing the developer environment: sandboxes for isolated execution of agents, secure dependencies (Hardened Images), and governed access to tools (MCP Catalog/Gateway).
* Docker Sandboxes run AI coding agents in isolated microVMs with separate kernels and networks.
* Docker Hardened Images Community provides free, open-source, minimal images rebuilt from source with SLSA Build Level 3 provenance and signed SBOMs.
* The Docker MCP Catalog and Gateway provide agents with trusted MCP servers, secret blocking, and audit logging.
* Docker collaborated with partners including Socket, the Trivy team, and Checkmarx to contain the blast radius of attacks like the axios compromise.
* Docker is joining the Athena alliance, an industry coalition for the coordinated defense of open source software in the era of AI-accelerated vulnerability discovery.
Executive Summary
Attackers are increasingly using AI to accelerate vulnerability discovery, which has drastically reduced the time between vulnerability discovery and exploitation. The core belief is that the durable response requires a dual strategy: building inherently secure and transparent products, and collaborating across the software ecosystem to share intelligence. This approach addresses the risk posed by AI-accelerated security threats within the software development lifecycle (SDLC).
To achieve this, Docker is implementing secure defaults for developers by embedding security into the SDLC via tools like Sandboxes for isolated execution of AI agents, Hardened Images for trusted open-source foundations, and a Managed Control Plane (MCP) Catalog/Gateway for governed access to tools. These measures aim to secure the developer environment as AI becomes integrated.
Furthermore, Docker is driving ecosystem collaboration through the Athena alliance, an industry coalition focused on coordinating the defense of open source software in the age of AI-accelerated vulnerability discovery. This involves sharing signals and intelligence across the supply chain to contain potential damage from attacks like the axios compromise.
Full Take
The narrative positions security as a function of system architecture and external coordination rather than solely relying on human skill or static defenses. The implication is that when the rate of attack accelerates exponentially due to machine intelligence, traditional defense mechanisms based on slow human review are obsolete. This shift introduces a systemic vulnerability: the distributed nature of open source development makes comprehensive supply chain security inherently challenging.
The solution proposed—secure defaults combined with ecosystem collaboration—is a strategic pivot from centralized security enforcement to decentralized, context-aware resilience. The focus on hardening foundational layers (DHI) and isolating execution environments (Sandboxes) addresses technical controls, while the Athena alliance attempts to address the systemic failure of isolated vendor responsibility by mandating shared intelligence across the supply chain.
This approach risks creating a complex dependency structure where trust is placed in interconnected systems (Docker, partners, open source foundations). The critical pattern here is the mobilization of industry coalitions to manage existential threats that transcend individual corporate capabilities. The central question remains: whether voluntary collaboration among large entities will effectively counteract autonomous AI-driven threat actors who operate at machine speed and exploit these same interdependencies for maximum leverage.
Sentinel — Human
The text demonstrates the structure and voice of authoritative human technical journalism or corporate strategy; it synthesizes existing concepts into a coherent call to action rather than generating novel, uncontextualized claims.