What are containers and how do their security risks differ from virtual machines?

Containers package an application with its dependencies and run on a shared operating system kernel, unlike virtual machines that each run their own operating system. Containers are lighter and faster but share the host kernel, meaning a kernel vulnerability affects all containers. Security risks include insecure container images with known vulnerabilities, excessive container privileges, exposed management interfaces, and secrets hardcoded in images.