Container Threats

A container packages an application together with its dependencies so it runs the same way everywhere.

Tools like Docker made containers popular because they start fast and are lightweight compared to virtual machines.

Unlike virtual machines, containers on the same host share the operating system kernel.

If an attacker escapes a container, that shared kernel can become a path to the host and to other containers.