Nearly Half of Organizations Face Data Breach Risks from Long-Lived Credentials

Nearly half of organizations are vulnerable to data breaches due to the presence of long-lived credentials in their cloud services. These authentication tokens or keys can remain valid for extended periods, increasing the risk of exploitation by attackers. A 2024 report by Datadog highlights that a significant portion of accounts across major cloud platforms like Google Cloud, AWS, and Microsoft Entra have access keys older than one year. With many credentials often unused and at risk of being leaked through source code, the report emphasizes the need for organizations to eliminate long-lived credentials and adopt modern authentication methods that use short-lived credentials to enhance security.

Opens on Dark Reading