• Added a container escape: docker-socket-breakout - opens an interactive host-root shell if the container/host offers a Docker-compatible socket.
• Added a container escape if the node's root filesystem is mounted into the container.
• Added a container escape if /proc/sys/kernel/core_pattern is available and writeable by the container.
• Added a container escape if CAP_PTRACE is available in the container and the pod has hostPID set to true. amd64 only.
• Added a scanner to alert if one of the above four container escapes are available.
• Special thanks to Brandon Edwards and Nick Freeman for the Compendium of Container Escapes.