Passwordless AND Keyless: The Future of (Privileged) Access Management
Briefly

SSH keys are critical access credentials that often outnumber passwords by a ratio of 10:1 in IT environments, making them a significant security concern.
Most traditional PAM vendors fail to manage SSH keys properly, with capabilities to identify only about 20% of the keys, leaving organizations vulnerable.
A risk assessment showed a customer that one root key could access all servers, highlighting the dangers of poorly managed SSH key proliferation.
SSH keys allow easy sharing and duplication since they lack default identities and expiration, creating a risk especially in large-scale IT environments.
Read at The Hacker News
[
]
[
|
]