A compromised package called home and got nowhere
A supply-chain compromise inside a customer’s AI stack beaconed out to the internet. Default-deny outbound at the workload held, the connection never left the estate, and the blast radius stayed at the paths that workload was cleared for. That is Outbound Containment, and it ships in Aviatrix Clearance.
Read the account
