$100K Paid Out for Google Cloud Shell Root Compromise

A Dutch researcher claimed Google’s very first annual Cloud Platform bug-bounty prize, for a clever container escape exploit. Continue reading $100K Paid Out for Google Cloud Shell Root Compromise

Container Escape Vulnerability Puts Cloud Infrastructure at Risk

A serious vulnerability in runC, a tool used to spawn and run Linux containers, allows attackers to break out of containerized environments and gain full access to the underlying servers. RunC is a container runtime that makes use of Linux’s bui… Continue reading Container Escape Vulnerability Puts Cloud Infrastructure at Risk

Escaping the Whale: Things You Probably Shouldn’t Do With Docker (part 2)

This post is part 2 of a series of blog posts on container hacking. If you haven’t read the part1, you should check it out. Today I’m going to tell you about a new collection of scripts, and a lab VM for hacking containers. Both of these re… Continue reading Escaping the Whale: Things You Probably Shouldn’t Do With Docker (part 2)