The Problem of Permissions and Non-Human Identities - Why Remediating Credentials Takes Longer Than You Think
Briefly

Research from GitGuardian and CyberArk indicates an alarming increase in secrets leaks, with 79% of IT leaders reporting incidents and over 12.7 million public GitHub credentials.
The study reveals that more than 90% of valid leaked secrets remained active for over five days, highlighting a serious gap in remediation processes for organizations.
Despite most organizations recognizing the security risks that leaked credentials pose, it typically takes 27 days to address these issues, exacerbated by confusion over ownership of machine identities.
The report emphasizes the complexity of remediating secrets sprawl incidents, particularly in ensuring that new secrets maintain the same permissions without compromising security.
Read at The Hacker News
[
|
]