Using an outdated oldstable with mitigations off is a terrible starting point but it's still an interesting article.
https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents/
{no channel}