Most Neoclouds Suck At Security OpenAI vs HuggingFace, Container Escapes,…

SemiAnalysis reports a concrete reason to examine how GPU clouds separate customer workloads: one of its tests escaped an application container, through a flaw in NVIDIA's container toolkit, and obtained root access on the virtual machine hosting it. The researchers did not go on to break out of that virtual machine. Their account of the test presents this as an example of layered security: the container failure exposed its host environment, while a surrounding virtual machine still stood between that compromise and the infrastructure beyond it.