While virtualization offers advantages over traditional software deployment, it also offers new security challenges. Processes that extend beyond the container's boundaries introduce risks that what happens in VM might not stay inside VM. Don Simard, the commercial solutions director at the U.S. National Security Agency, explained the problem to InfoWorld...
...NSA realized that this benefit of virtualization also introduced a new potential threat. After all, Simard said, "graphics cards and network cards today are really miniature computers that see everything in all the VMs." In other words, they could be used as spies across all the VMs, letting a single PC spy on multiple networks. Although he's not aware of any such spyware today, it's not a problem the NSA wants to experience or see happen in other intelligence agencies.
Virtualization's secret security threats, InfoWorld