DEF CON 34 Workshop: AI Can Break Out of Containers, but Containers Were Never a Security Boundary
Start here
An AI engineer who runs the Container Escapes 101 workshop, updated for 2026 and presented at AppSec Village at DEF CON 34, argues that AI-driven container breakouts are largely real but not cause for panic. Semi-autonomous offensive systems can now identify an application's CNI, exfiltrate data over DNS, find command injection and chroot out, the engineer says. The underlying point is that containers were never designed to contain anything and still rely on the host. The practical fixes the workshop points to are observability, patching, least privilege and trying microVM runtimes again.
Generated from reports · updated 1 h ago
Report timeline
Follow the reports to see the event from different sides.
- Hacker News · AIAI Escapes Containers Faster Than Me: Container Escapes 101 at DEF CON 34
An AI engineer behind the Container Escapes 101 workshop, updated for 2026 and presented at AppSec Village @ DEF CON 34, argues the AI hype around container breakouts is largely real but not cause for panic. Semi-autonomous offensive systems can now identify an app's CNI, exfiltrate data over DNS, find command injection and chroot out, yet containers were never designed to contain anything and still rely on the host. The practical fixes remain observability, patching, least privilege and trying microVM runtimes again.
Heat for this event
Not enough continuous observations yet to draw a trend.