Old credentials never die they just present a cloud security risk

Long-lived credentials on major cloud platforms continue to be a huge risk for organizations, according to a new report from Datadog. Long-lived cloud credentials never expire and frequently get leaked in source code, container images, build logs and application artifacts, making them a major security risk. The report finds that 46 percent of organizations are still using unmanaged users with long-lived credentials. Not only are long-lived credentials widespread across all major clouds, they are also often old and even unused. 62 percent of Google Cloud service accounts, 60 percent of AWS IAM users and 46 percent of Microsoft Entra ID… [Continue Reading]