Ghost Credentials Expose Cloud Systems to Hidden Identity Risks

The article discusses the issue of 'ghost credentials' in cloud security, highlighted by security researcher Aleksandr Krasnov. It details how dormant non-human identities, like AI agents and service accounts, can create security blind spots, allowing for unauthorized access and privilege escalation. Krasnov's investigation revealed that organizations often lose track of what they trust in automated environments.

He introduced 'NHI Hound', an open-source tool designed to identify and manage these non-human identities and their trust relationships. The tool is intended to help organizations rebuild a reliable trust model, especially as the number of identities grows exponentially in larger companies. Krasnov also outlined plans for improving the tool's functionality for bigger organizations while emphasizing the importance of addressing these identity management challenges to enhance cloud security.