Google Project Zero zeroes in on Google project
Horn gouges hole in host for Docker guest breakout Google's gVisor sandboxed kernel had a bug that would allow an attacker to escape their container and overwrite files in the host filesystem - according to Google Project Zero's Jann Horn."