cd ~/tags/containers

containers

2026-04-05

Breaking Isolation Boundaries: VM Escapes, Container Breakouts, and Sandbox Escapes

A deep technical analysis of 2025's most dangerous attack pattern — isolation boundary escapes. From vsock VM escapes to UNIX socket sandbox bypasses, understanding how attackers break out of…

14 min read

containers linux kernel security Virtualization Sandbox VM Escape Exploitation

2026-02-23

Seccomp-BPF: Confining Linux Processes at the Syscall Boundary

A deep dive into Linux seccomp-BPF — building syscall sandboxes from raw BPF filters to production-grade policies, with practical C examples and analysis of how Chrome, Docker, and systemd use…

23 min read

containers linux kernel security Seccomp BPF Sandboxing Syscalls Hardening

2019-04-06

Virtualisation in Operating Systems

Virtualisation is the process of creating a virtual version of a physical object.

2 min read

containers docker hypervisor virtualbox