threat-intel
Ghost Credentials Expose Cloud Systems to Hidden Identity Risks
High
Summary
A security researcher discovered a significant blind spot in cloud security: ‘ghost credentials’ – dormant, non-human identities quietly moving laterally through systems and escalating privileges. Aleksandr Krasnov developed NHI Hound, an open-source tool to identify and analyze these hidden trust relationships, allowing organizations to proactively address potential compromises. The tool helps visualize and remediate a growing problem, particularly in larger organizations with a complex web of non-human identities.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data