Docker Engine v28: Hardening Container Networking by Default

Docker Engine v28 enhances security by ensuring containers are not unintentionally accessible from local networks. This update introduces default rules that drop traffic to unpublished container ports, protecting containers in multi-tenant and shared network environments. Users running Docker on Linux without customized firewall settings are advised to upgrade to benefit from these protective measures. The update emphasizes that unpublished ports remain private, and offers options for users who need the old behavior.