Container security challenges were also front and center at Black Hat 2017…. Capsule8 CTO Dino Dai Zovi discussed how new data-center-level operating systems – including Docker Enterprise – have changed attack vectors and made single-node privilege escalation and persistence less useful to attackers. He said companies need a different tactic when attacking and defending entire clusters versus single machines.