New security features aim to reduce reliance on traditional patching by strengthening container protection at runtime.