AI escapes from containers faster than me – so what?

In a DEF CON 34 AppSec Village piece tied to an updated Container Escapes 101 workshop, the author says AI-driven offensive tooling can now chain tasks like identifying CNI, exfiltrating data over DNS, finding command injection and chrooting out, but argues containers were never meant to contain anything and still depend on the host. The recommended defenses are unchanged: observability, patching, container best practices, and revisiting dismissed alerts, with microVM runtimes now worth another look.