BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.cloud-native.rejekts.io//cloud-native-rejekts-atlant
 a-na-atlanta-2025//3QKYBF
BEGIN:VTIMEZONE
TZID:EST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T070000Z
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T080000Z
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-cloud-native-rejekts-atlanta-na-atlanta-2025-MEJ3TC@cfp.cloud-n
 ative.rejekts.io
DTSTART;TZID=EST:20251108T094000
DTEND;TZID=EST:20251108T101000
DESCRIPTION:Leonardo DiCaprio made it look glamorous\, but real-world conta
 iner escapes are less Hollywood and more chaotic. Still\, the parallels ar
 e striking. Like Frank Abagnale slipping past the guards at an Atlanta pri
 son\, modern attackers escape containers not with brute force but with cle
 ver misdirection: exploiting weak isolation\, abusing misconfigured permis
 sions\, and sidestepping detection.\n\nIn this talk\, we’ll trace the pa
 th of a container breakout—from the initial escape to lateral movement a
 cross a Kubernetes cluster. We’ll walk through the attack step by step (
 yep\, there’s a demo)\, then flip the perspective to show how modern def
 enses shut it down.\n\nWe’ll cover:\n- How container escapes actually ha
 ppen in the wild\n- What user namespaces in Kubernetes 1.33 bring to the t
 able\n- How to achieve multi-tenancy workload isolation\n- How to detect b
 reakout attempts before they go full clusterf*ck\n\nWhether you're a platf
 orm engineer\, security lead\, or just into a good cat-and-mouse chase thr
 ough the control plane\, you’ll leave with real-world tactics for keepin
 g your cluster escape-proof.
DTSTAMP:20261013T125658Z
LOCATION:Theater
SUMMARY:Catch Me If You Can: A Kubernetes Escape Story - Jed Salazar\, Jame
 s Petersen
URL:https://cfp.cloud-native.rejekts.io/cloud-native-rejekts-atlanta-na-atl
 anta-2025/talk/MEJ3TC/
END:VEVENT
END:VCALENDAR