Technology

Kata Containers 4.0 Cements the Project’s Role as the Open Source Standard for Sandboxing AI Agents

Published

3 months ago

July 22, 2026

A new Rust-based default runtime, expanded hardware support and a hardened supply chain give the project’s isolation model the strength agentic workloads demand

AUSTIN, Texas, July 22, 2026 /PRNewswire/ — The Kata Containers community today announced the release of Kata Containers 4.0, a milestone that reinforces the project’s growing role as the open source foundation for sandboxing AI agents. The release’s central engineering achievement, a new Rust-based runtime, becomes the project’s default implementation, delivering the memory safety and performance gains needed to isolate agents whose behavior can’t always be predicted in advance.

Kata Containers is an open source project that combines the speed of Linux containers with the isolation of lightweight virtual machines. The project is managed by the OpenInfra Foundation and is used across multi-tenant Kubernetes environments, secure CI/CD pipelines and, increasingly, AI infrastructure.

*** Download Kata Containers 4.0

Why AI Agents Need a Stronger Sandbox

AI agents carry a different risk profile than traditional microservices: their execution paths shift based on the tools they can reach, the memory they accumulate and the prompts they receive, making them harder to trust by default. Kata Containers addresses that risk by running each workload inside its own lightweight virtual machine rather than sharing the host kernel, so a compromised agent cannot see another agent’s memory or move laterally across a cluster.

Kata Containers now serves as one of the supported runtimes for Agent Sandbox, a project under the Kubernetes SIG Apps umbrella, and remains the foundation for Confidential Containers, which encrypts data in use, allowing agent workloads to process private data without exposing it to the infrastructure operator.

*** Community experts from Ant Group, Google and NVIDIA discussed these use cases in depth during the OpenInfra Live episode on agent sandboxing, summarized in this Superuser article.

Organizations already running agent workloads in production are taking notice.

“Ant Group has long been a pioneer in deploying Kata Containers at scale. We first proved its value in co-locating our offline batch and compute workloads, where latency is less critical, to maximize resource efficiency and advance Ant Group’s green computing initiatives. To further bolster our security posture, we expanded Kata’s footprint to our core online services last year, enabling real-time security auditing and immediate mitigation of malicious access. Today, Kata has naturally become the foundational secure sandbox for our AI Agents. With its outstanding isolation and ultra-fast startup performance, Kata is now an integral part of Ant Group’s Agentic Infrastructure. The architectural leap in Kata 4.0—especially the transition to the Rust runtime—directly addresses the stringent security and efficiency requirements of modern AI sandboxing. This release is a masterpiece of community collaboration, and we are proud to drive its adoption.” — Fupan Li, Kata Containers architecture committee (AC) member and head of container technology, Ant Group

“Kata Containers 4.0 brings a memory-safe Rust foundation to one of the ecosystem’s most proven sandboxing frameworks. NVIDIA’s full GPU support, carried seamlessly from the Go runtime to Rust, enables customers to adopt 4.0 without disruption — running agentic AI and confidential workloads with stronger isolation, attestation, and performance. The NVIDIA Confidential Containers Reference Architecture, built on Kata Containers, provides NVIDIA partners a validated Confidential Computing framework for Kubernetes deployments, accelerating the path from evaluation to production. NVIDIA is proud to support this milestone and remains committed to helping customers deploy confidential AI at scale.” — Erik Bohnhorst, director of product management, NVIDIA

“Kata Containers is the foundation of our confidential computing stack here at Edgeless. Our Contrast framework shields entire fleets of containers within Kubernetes and our end-to-end encrypted GenAI inference service Privatemode AI builds directly on top of that. Kata’s pod-in-VM model is what makes this possible. The project’s continued focus on confidential computing has been essential to us. We’re excited about the 4.0 release and proud to contribute to a project that so many production workloads now depend on.” — Felix Schuster, CEO, Edgeless Systems

“Kata is a key component for many of Microsoft’s container isolation workloads such as AKS’s pod sandboxing offering. Kata’s focus on confidentiality, rust-based security, and improved agentic isolation continue to make it a valuable tool to meet the demands of our customers. Microsoft is proud to contribute to this Kata release, and to continue improving the security of AI workloads for our customers.” Jim Perrin — principal program manager lead – Azure Linux, Microsoft

A Rust-Based Foundation Makes It Possible

That level of isolation is only possible because of the architectural work behind Kata Containers 4.0. With this release, runtime-rs, the Rust-based runtime, replaces the original Go implementation as the project’s default, capping a multi-year community effort to move onto a memory-safe foundation. The change improves memory safety, reduces the runtime’s footprint and lowers startup latency, the kind of performance headroom that matters when sandboxes are being spun up and torn down at agent speed. The Go runtime is now deprecated and will continue to receive bug and security fixes during a defined transition period, but the community will not remove it before Kata Containers 5.0.

“Kata Containers 4.0 marks an important evolution for the project,” said Ildiko Vancsa, director of community for the OpenInfra Foundation. “By making the Rust runtime the default, the community is strengthening the project’s safety guarantees while creating a foundation for long-term innovation in secure cloud-native infrastructure.”

*** For the full technical breakdown, including the Go runtime deprecation timeline, supported hypervisors and hardware architectures, read the Kata Containers 4.0 release notes.

Version 4.0 also brings changes beyond the runtime: formalized release acceptance criteria, expanded hardware and hypervisor support, and a hardened software supply chain with updated dependencies and stricter CI checks. Together, these changes give the project a clearer, more predictable foundation for future releases.

*** For a closer look at the community’s work on the new Rust-based runtime, read the Kata Containers 4.0 blog post.

Get Involved

Kata Containers is an open source community that welcomes contributors across runtime development, documentation, testing and ecosystem integration.

Website: https://katacontainers.io GitHub: https://github.com/kata-containers/Slack: #general

About Kata Containers

Kata Containers is an open source project that delivers the performance of standard Linux containers with the enhanced isolation of lightweight virtual machines. Built for secure multi-tenant environments, Kata Containers enables cloud-native workloads to run with stronger isolation without sacrificing speed or compatibility. Kata Containers is managed by the OpenInfra Foundation. katacontainers.io

About the OpenInfra Foundation

The OpenInfra Foundation builds communities that write open source infrastructure software running in production. Backed by more than 110,000 individuals in 187 countries, the OpenInfra Foundation hosts open source projects and communities of practice covering AI infrastructure, container-native applications, edge computing and datacenter clouds. The OpenInfra Foundation is part of the nonprofit Linux Foundation. Join the OpenInfra movement: www.openinfra.org

Media Contacts:
Robert Cathey
Cathey.co for the OpenInfra Foundation
robert@cathey.co
Allison Price
OpenInfra Foundation
allison@openinfra.org

View original content to download multimedia:https://www.prnewswire.com/news-releases/kata-containers-4-0-cements-the-projects-role-as-the-open-source-standard-for-sandboxing-ai-agents-302832233.html

SOURCE OpenInfra Foundation

Technology

Lovey announces £250m senior secured credit facility with Pollen Street Capital

Published

5 minutes ago

October 27, 2026

UK’s fastest-growing fintech announces its largest funding facility to date to support more UK SMEs

BIRMINGHAM, England, Oct. 27, 2026 /PRNewswire/ — Lovey, the UK’s fastest-growing fintech and financial services provider, specialising in SME lending and brokerage, has today announced a senior secured credit facility of up to £250 million with Pollen Street Capital (“Pollen Street”), an alternative asset manager. The facility is made up of £50 million committed capital and a £200 million accordion, making it the largest funding facility in Lovey’s history and marking a key milestone in the company’s growth.

The facility demonstrates continued institutional investor confidence in Lovey’s lending model, technology and long-term strategy and reinforces Lovey’s position as a leading finance provider focusing on SME funding. The facility will significantly increase Lovey’s lending capacity, supporting the business as it scales its own-book lending while continuing to grow its established brokerage proposition.

Founded by Jack Smith in 2016, Lovey has grown from a one-person start-up into a 120-strong business, funding more than £600 million in loans to over 11,000 UK SMEs. Built around a mission to make lending simple, fast and beautiful, Lovey has expanded rapidly while staying focused on making finance easier and more accessible for small businesses. The new facility will support that mission by giving Lovey the capital to help more UK SMEs access funding quickly and flexibly.

Lovey began lending directly from its own balance sheet in 2022, building on its experience as a broker to develop a deeper understanding of the funding needs of UK SMEs. Today, the business combines direct lending with its established brokerage proposition, giving customers access to both Lovey’s own lending and a wider panel of funding partners. This approach allows Lovey to match businesses with the funding solution that best suits their needs, while the new facility provides greater capacity to grow its direct lending operation.

Jack Smith, Founder and CEO at Lovey, comments:
“This new facility is an important milestone for us and will enable us to put more capital behind UK small businesses, scale our own-book lending and give more SMEs access to finance when they need it. Pollen Street shares our belief that finances for small businesses should be simpler, faster and more flexible, and we’re really pleased to have them backing Lovey for this next stage of growth.”

Kai Hunter, Chief Operating Officer at Lovey, comments:
“The funding announced today is the result of close and collaborative work with Pollen Street and I am grateful to their team, and to our own, for the diligence they brought to it. This funding deepens our lending capacity and allows us to offer larger loans, so that we can back more of the UK’s small and medium-sized businesses, from those that have found finance hardest to secure to the well-established, with greater speed and certainty.”

Ethan Saggu, Investment Director, Pollen Street, adds:
“Lovey has spent almost a decade seeing the UK SME lending market from a broker’s perspective, giving the team an expert view of where demand for credit is going unmet. We have financed a number of specialist SME lenders and recognise what it takes to grow from brokerage into balance-sheet lending. Lovey has done so with a well-defined product and a focused approach, and we look forward to supporting the team as it scales.”

Lovey was advised by Ashurst Perkins Coie and Pollen Street was advised by Simmons & Simmons.

The facility builds on Lovey’s existing funding arrangements announced last year, including a £35 million revolving credit facility from Paragon Bank and a £10 million junior medium-term note programme from LGB Capital Markets. The new facility also adds to Lovey’s growing institutional funding base as it enters its next phase of expansion.

To learn more about Lovey or to apply for a fast, flexible business loan, visit Lovey’s website.

For any further information, please contact: press@lovey.com

About Lovey (the trading name of Love Finance Limited):
Lovey is the UK’s fastest-growing fintech and financial services provider, specialising in SME lending and brokerage. Founded in Birmingham in 2016 by Jack Smith, Lovey has a mission to make lending simple, fast and beautiful. The company has funded more than £600 million in loans for over 11,000 SMEs across the UK.

Recognised by EY, Deloitte, The Sunday Times, Financial Times, UK Growth Index, FEBE, and Sifted as one of the UK’s fastest-growing companies. Lovey combines direct lending and brokerage services to deliver fast, flexible, and tailored funding solutions. With an industry-leading 4.9-star Trustpilot rating, businesses can enquire in 60 seconds and receive funding in as little as 4 hours.

Website: www.lovey.com

Pollen Street Press Office:
FGS Global
Chris Sibbald / Anna Tabor
PollenStreetCapital-LON@fgsglobal.com

About Pollen Street:
Pollen Street is a fast-growing and high performing private capital asset manager. Established in 2013, the firm has built deep capability across the financial and business services sectors aligned with mega-trends shaping the future of the industry. Pollen Street manages over €9bn AUM across private equity and credit strategies on behalf of investors including leading public and corporate pension funds, insurance companies, sovereign wealth funds, endowments and foundations, asset managers, banks, and family offices from around the world. Pollen Street has a team of over 100 professionals.

www.pollenstreetgroup.com

Click here for visual assets

View original content to download multimedia:https://www.prnewswire.co.uk/news-releases/lovey-announces-250m-senior-secured-credit-facility-with-pollen-street-capital-302919648.html

Technology

Baidu to Report Third Quarter 2026 Financial Results on November 16, 2026

Published

5 minutes ago

October 27, 2026

BEIJING, Oct. 27, 2026 /PRNewswire/ — Baidu, Inc. (Nasdaq: BIDU; HKEX: 9888 (HKD Counter) and 89888 (RMB Counter)) (“Baidu” or the “Company”), a leading AI company with strong Internet foundation, today announced that it will report its financial results for the Third Quarter 2026 ended September 30, 2026, before the U.S. market opens on November 16, 2026. Baidu’s management will hold an earnings conference call at 7:30 AM on November 16, 2026, U.S. Eastern Time (8:30 PM on November 16, 2026, Beijing Time).

Please register in advance of the conference call using the link provided below. It will automatically direct you to the registration page of “Baidu Inc. Q3 2026 Earnings Conference Call”. Please follow the steps to enter your registration details, then click “Register”. Upon registering, you will then be provided with the dial-in number, the passcode, and your unique access PIN. This information will also be emailed to you as a calendar invite.

For pre-registration, please click:
https://s1.c-conf.com/diamondpass/10057872-oyt4z8.html

In the 10 minutes prior to the call start time, you may use the conference access information (including dial-in number(s), the passcode and unique access PIN) provided in the calendar invite that you have received following your pre-registration.

Additionally, a live and archived webcast of this conference call will be available at https://ir.baidu.com.

A replay of the conference call may be accessed by phone at the following number until November 24, 2026:
US: 1 855 883 1031
Replay PIN: 10057872

About Baidu

Founded in 2000, Baidu’s mission is to make the complicated world simpler through technology. Baidu is a leading AI company with strong Internet foundation, trading on Nasdaq under “BIDU” and the HKEX under “9888.” One Baidu ADS represents eight Class A ordinary shares.

View original content:https://www.prnewswire.com/news-releases/baidu-to-report-third-quarter-2026-financial-results-on-november-16-2026-302920463.html

SOURCE Baidu, Inc.

Technology

IBS Software’s iCargo to power Philippine Airlines Cargo Modernisation

Published

5 minutes ago

October 27, 2026

Airline to move from its current cargo system to a modern, cloud-based platform covering cargo sales, ground handling operations and revenue accounting

MANILA, Philippines, Oct. 27, 2026 /PRNewswire/ — IBS Software’s iCargo, a cloud-based platform bringing cargo sales, ground handling operations and accounting together, has been selected by Philippine Airlines (PAL) to replace its current cargo system. The implementation will extend iCargo’s capabilities across PAL’s domestic and international cargo operations.

As the leading AI-native product company in the travel technology sector, IBS Software will support PAL’s broader cargo transformation and modernisation programme with capabilities that support PAL’s full range of business functions, from commercial and operations to back-office accounting, while enabling further innovation and digitisation through a single, fully integrated cloud-based platform. iCargo will support cargo movements across PAL’s domestic and international operations, including international requirements such as customs reporting, duties and taxes settlement and regulatory compliance. iCargo already supports carriers with this same mix of demands, providing the flexibility, scale and capabilities to manage both.

The transition will enable PAL to address key operational requirements across its cargo operations, including system performance and data analytics. iCargo will provide modern capabilities to support faster shipment processing, greater reliability and end-to-end shipment visibility, while reducing manual intervention and enabling more efficient processes.

Beyond operational efficiency, these capabilities will help PAL Cargo bring its ‘Care that Delivers’ promise to life, giving customers greater confidence through improved shipment visibility, reliable service and a more seamless cargo experience. As cargo volumes continue to grow across its network, the new platform will also provide the technological foundation for continued innovation, operational excellence and long-term growth.

IBS Software’s proposal combined a strong technology fit with a proven track record of delivering successful cargo transformations for airlines worldwide. The selection of iCargo builds on an established relationship between Philippine Airlines and IBS Software, broadening the portfolio of IBS Software products used by PAL and reinforcing their shared commitment to long-term innovation and business growth.

“This initiative represents an important step in the modernisation of our cargo business,” said Jason Siy, Vice President for Cargo Business, Philippine Airlines. “As we grow across our domestic and international network, we need a system that increases visibility, improves operational efficiency and enables us to deliver a better experience for our customers. We see iCargo as a key enabler of our long-term cargo transformation strategy and of our ambition to build an even stronger cargo business for the future.”

“Philippine Airlines has a clear vision for the future of its cargo business, and we are proud to support that journey,” added Sunil George, Vice President & Region Head of Oceania, IBS Software. “This partnership is about more than implementing a new cargo platform. It is about working closely with PAL to build the digital foundation for future growth, innovation and operational excellence, and continuing a relationship we value deeply.”

For more information about IBS Software’s iCargo solution, visit: https://www.ibsplc.com/product/air-cargo-solutions/icargo.

About IBS Software

IBS Software is a leading travel technology company delivering AI-native travel intelligence that enables smarter, faster and more resilient decision-making, with built-in guardrails across aviation, cargo and logistics, and leisure and hospitality. It powers core capabilities for leading travel brands worldwide, spanning airline retailing, passenger services, loyalty, fleet, hub and crew operations, cargo management, and cloud-native platforms for hotels and cruise line operators, and operates from 17 offices globally.

Further information can be found at www.ibsplc.com. Follow us:
Blog | LinkedIn | Facebook | Instagram

About Philippine Airlines

Philippine Airlines (PAL) is the Philippines’ flag carrier and the country’s only full-service network airline. Founded in 1941, PAL is Asia’s first commercial airline and has played a vital role in connecting the Philippines to the world for 85 years.

PAL operates scheduled nonstop flights from its hubs in Manila and Cebu to 29 destinations across the Philippines and 40 destinations in Asia, North America, Australia, and the Middle East.

PAL is an APEX Four Star™ airline and was recognised by Cirium for achieving the highest on-time performance among Asia-Pacific carriers in 2025. In 2026, Philippine Airlines was officially invited to join the oneworld® Alliance.

View original content to download multimedia:https://www.prnewswire.com/news-releases/ibs-softwares-icargo-to-power-philippine-airlines-cargo-modernisation-302919378.html

SOURCE IBS Software