How can brute-force attacks compromise password security

Question

Brute-force attacks systematically try different password combinations to gain access. How do these attacks work, and what makes them a serious threat?