Leveraging eBPF for Improved Infrastructure Observability

To efficiently and effectively investigate multi-tenant system performance, Netflix has been experimenting with eBPF to instrument the Linux kernel to gather continuous, deeper insights into how processes are scheduled and detect “noisy neighbors”.

AWS Cloud Development Kit Vulnerability Enables Full AWS Account Takeover

A new vulnerability discovered in AWS Cloud Development Kit (CDK) by security firm Aqua could lead to an attacker fully taking over a target AWS account due to manual deletion of artifact S3 buckets. While AWS fixed the vulnerability, you are still required to take action if you have used CDK version v2.148.1 or earlier.

Docker Introduces Hardened Images to Strengthen Container Security

Docker has launched Docker Hardened Images, a catalog of enterprise-grade, security-hardened container images designed to protect against software supply chain threats. By relieving DevOps teams from the chore of securing their containers on their own, hardened images provide an easier way to meet enterprise-grade security and compliance standards, Docker says.

Docker Desktop 4.43 Expands Model Runner and Brings New Compose-Kubernetes Bridge

Following the introduction of Model Runner a few months ago, Docker Desktop 4.43 expands its capabilities with improved model management and broader OpenAI compatibility. The release also debuts a new Compose Bridge to simplify the generation of Kubernetes configurations and upgrade the Gordon AI agent.

Docker Expands Compose for Agent Development and Ties in Cloud Offload Support

Docker launched a new feature to let developers define, build, and run agents using Docker Compose, with the aim to streamline agent development process and reduce repetitive tasks. Additionally, Docker Offload, now in beta, provides a way to seamlessly offload building and running models to remote GPU compute.