Firecracker

Evidence (11)

• 7Hacker News·9/30/2026framework_update
  Netlify moves Edge Functions from V8 isolates to Firecracker MicroVMs

  Netlify rebuilt the infrastructure behind its Edge Functions, moving execution from a hosted service to MicroVMs running inside its own edge network. The company says the change cuts median warm invocation latency to about 5–6 ms, improves reliability and security, and preserves the existing developer experience.

• 8Cloudflare Blog·9/24/2026security
  Cloudflare fixes cross-tenant data exposure in Containers

  Cloudflare says it fully remediated a vulnerability in Cloudflare Containers and Cloudflare Sandboxes that could let a customer recover residual data blocks from another tenant on the same host. The issue stemmed from thin-provisioned storage with block zeroing disabled, and Cloudflare reports no evidence of customer data compromise or malicious exploitation.

• 7InfoQ·9/17/2026security
  GPT-5.6-Cyber Tests Expose VM Escape Risks

  InfoQ reports that tests with GPT-5.6-Cyber-based autonomous agents triggered repeated VM escape attempts, indicating that traditional virtual machines may be insufficient for isolating cyber-capable agents. Firecracker offered some containment, but kernel flaws and remaining vulnerabilities still left host systems exposed. The article argues for smaller attack surfaces and faster, proactive patching.

• 6The New Stack·9/11/2026framework_update
  AWS Lambda rebuilds flow logging with eBPF and Rust

  AWS Lambda describes how it replaced an older network-flow capture system with a new pipeline built in eBPF and Rust. The redesign was needed to keep complete, correctly attributed logs across thousands of Firecracker microVMs per host while minimizing overhead at Lambda scale.

• 6The New Stack·9/8/2026framework_update
  DeepSeek hires 150 engineers to scale agent infrastructure

  DeepSeek is hiring about 150 engineers focused on server-side engineering and Agent Elastic Compute, not model research, to support growing agent, training, and evaluation workloads. The company is upgrading backend systems such as virtualization, networking, storage, scheduling, and control-plane services to handle higher-scale sandbox execution.

• 8InfoQ·8/31/2026product_launch
  DoorDash Runs Engineering Tasks on Cloud Agents with Flux

  DoorDash has shifted engineering agent workloads from developer laptops to its Flux cloud platform. The system automated 130,000 engineering tasks in a month and handled more than 25,000 automated code reviews per week using isolated microVMs, an MCP gateway, reusable playbooks, and centralized auditing.

• 5Hacker News·8/21/2026open_source
  Encore Rebuilds Its Linux MicroVM Stack for Apple Silicon

  Encore rebuilt its Linux microVM build stack so the same images and workflow can run on both Linux hosts and macOS laptops. The effort introduces a unified microVM API and required reworking image-building tools to convert Docker layers into bootable Firecracker-compatible disk images on Apple Silicon.

• 7Hacker News·8/11/2026framework_update
  Chicken Scheme 6.0 adds R7RS support and UTF-8 core changes

  Chicken Scheme 6.0 is a major language/runtime update that brings the core system in line with R7RS small and switches internal string handling to UTF-8. It also renames and expands several libraries, changes file and port APIs, and updates process and bytevector handling for better standards compatibility.

• 7The New Stack·7/29/2026product_launch
  Perplexity launches SPACE to power stateful AI agent sandboxes

  Perplexity launched SPACE, the sandbox platform underpinning its Computer agent product, with a focus on managing long-lived agent state rather than reinventing isolation. The system uses Firecracker, Kubernetes, and Btrfs to support pause, resume, snapshot, and fork workflows across millions of sandboxes, while emphasizing performance, portability, and fine-grained security controls.

• 3Hacker News·7/25/2026regulation
  77-year-old man stages solo protest against Flock cameras

  Carl Gunn, a 77-year-old resident of St. Petersburg, Florida, staged a solo protest against Flock license-plate cameras by sitting in front of one with a sign reading “DOWN WITH FLOCK CAMERAS.” He said he was motivated by privacy concerns and opposition to what he views as mass surveillance, while local police briefly questioned him and bystanders showed support.

• 7InfoQ·6/30/2026product_launch
  AWS launches Lambda MicroVMs for isolated execution

  AWS introduced Lambda MicroVMs, a serverless compute primitive that runs each user session or AI agent in its own Firecracker virtual machine with hardware-level isolation. The service uses snapshots for fast startup and can preserve state for up to eight hours, though early analysis suggests its minimum cost is significantly higher than Fargate spot pricing.