The Good, the Bad, and the Ugly - Hacking 3 CSPs with 1 Vulnerability

Explore a critical container escape vulnerability in NVIDIA Container Toolkit and its devastating impact across three major cloud service providers in this 26-minute conference talk. Discover how a single flaw in the industry-standard framework for GPU-based containerized applications affected Azure, DigitalOcean, and Replicate with dramatically different outcomes - from minor impact to complete service takeover. Learn about the vulnerability discovery process, real-world exploitation scenarios, and how each cloud provider's unique architecture influenced the attack's success. Examine the anatomy of container escape vulnerabilities in multi-tenant GPU environments, understand lateral movement techniques that triggered security teams, and gain insights into cloud provider infrastructure design. Master defensive strategies by analyzing the specific flaws and misconfigurations that enabled these exploits, and discover how to implement stronger security guardrails in cloud environments hosting AI workloads.