A skipped zeroing setting in Cloudflare's container storage let one customer's disk reads pull up another's data: 5,614 of 5,614 tested directory blocks in a researcher's test came from strangers, including intact SQLite databases. Cloudflare patched it, but the flaw sat in the storage allocator, not the VM boundary, a distinction security engineers say most "isolated" platforms never actually verify.

— via InfoQ, Steef-Jan Wiggers