AI Briefing#microvm
The latest AI and developer news about #microvm, with the original source and a short summary.
The latest AI and developer news about #microvm, with the original source and a short summary.
The migration to Cloud Hypervisor-based microVMs achieves 500 ms sandbox acquisition and avoids 96.1% of recent Linux kernel CVEs.
We confirmed cost savings by reducing system call overhead to runc levels through microVM isolation and implementing non-billing for idle CPU.
Replit details the Agent Habitat architecture, which enforces least-privilege access, MicroVM isolation, and centralized credential management to protect enterprise systems from agent vulnerabilities.
Mecatl is an Apache 2.0 licensed, open-source runtime for executing AI agents on self-hosted infrastructure, featuring provider-agnostic model integration, durable event logs, and optional microVM isolation for tool execution.
AWS Lambda has expanded to a total of four execution models by adding three new options—always-on, long-running workflows, and code sandboxes—alongside the existing per-invocation execution model.
Vercel is launching a $1 million hacker challenge to verify the security boundaries of its sandbox technology.
The emergence of open-weight models capable of offensive security research has made a defensive response urgent.
Even if code execution is isolated, a sandbox fails to provide a complete security boundary unless network egress is controlled.
Docker has released disposable microVM isolated environments for AI coding agents.
AgentENV rapidly manages agent reinforcement learning environments using Firecracker-based sandboxes.
Hermes Agent now supports Vercel AI Gateway and Vercel Sandbox.
AWS has released AgentCore Runtime Instances, which support long-running tasks and GPUs.
Vercel Sandbox now supports Devin Outposts, providing session-isolated execution environments.
AWS Lambda has launched an isolated, stateful MicroVM execution environment for AI coding assistants and more.
AWS Lambda has launched Firecracker-based MicroVMs, providing an isolated, stateful environment for running user code.
Browser Use leveraged Firecracker microVMs to cut browser session costs by 66% and increase launch speed.
Introducing LangSmith Sandboxes, which provides hardware-level isolation so AI agents can safely and independently execute code.
LangChain has launched LangSmith Sandboxes, a hardware virtualization-based service for secure code execution by agents, to general availability.
Claude Managed Agents can now run on Vercel Sandbox.
Perplexity Computer strengthens security with Firecracker-based isolation and guardrails.
Replit builds trust by layering defenses across every level, from sandbox to deployment.
Introducing portable microVMs with sub-second boot on macOS and Linux.
It's a portable VM tool that boots up immediately with sub-second cold start.
Notion Workers leverages Vercel Sandbox's microVMs to safely run untrusted code at scale in isolated environments.