46% of organisations are using unmanaged users with long-lived credentials

Datadog has published its new report, the State of Cloud Security 2024. The report found that long-lived credentials continue to be a major risk for organizations across all cloud providers.

  • Monday, 28th October 2024 Posted 8 months ago in by Phil Alsop

Long-lived cloud credentials never expire and frequently get leaked in source code, container images, build logs and application artifacts, making them a major security risk. Research has shown that they are the most common cause of publicly documented cloud security breaches. While the risks are well documented, Datadog’s report found that almost half (46%) of organizations are still using unmanaged users with long-lived credentials.

According to the report, not only are long-lived credentials widespread across all major clouds, they are also often old and even unused. 62% of Google Cloud service accounts, 60% of AWS IAM users and 46% of Microsoft Entra ID applications have an access key older than one year.

“The findings from the State of Cloud Security 2024 suggest it is unrealistic to expect that long-lived credentials can be securely managed,” said Andrew Krug, Head of Security Advocacy at Datadog. “In addition to long-lived credentials being a major risk, the report found that most cloud security incidents are caused by compromised credentials. To protect themselves, companies need to secure identities with modern authentication mechanisms, leverage short-lived credentials and actively monitor changes to APIs that attackers commonly use.”

Other key findings from the report include:

● Adoption of cloud guardrails is on the rise—79% of S3 buckets are covered by an account-wide or bucket-specific S3 Public Access Block, up from 73% a year ago—thanks to cloud providers starting to enable guardrails by default.

● More than 18% of AWS EC2 instances and 33% of Google Cloud VMs have sensitive permissions to a project. This puts organizations at risk as any attacker compromising the workload is able to steal associated credentials and access the cloud environment.

● 10% of third-party integrations have risky cloud permissions, allowing the vendor to access all data in the account or to take over the whole AWS account. 2% percent of third-party integration roles don't enforce the use of External IDs, which allows an attacker to compromise them through a "confused deputy" attack.

Over 40% of agentic AI projects will be cancelled by the end of 2027, due to escalating costs, unclear business value or inadequate risk controls,...

AI use is outpacing policy and governance, ISACA finds

Posted 10 hours ago by Phil Alsop
The majority (83%) of IT and business professionals in Europe believe employees in their organisation are using AI.

AI and offshore outsourcing on the rise

Posted 12 hours ago by Phil Alsop
Whitelane Research, an independent organisation specialising in IT sourcing research across Europe, has released its 2025 IT Sourcing Study for the...
55% report cloud environments are more complex to secure than on-premises infrastructure.
As demand for data-driven insights increases, data overload could render UK businesses operationally ineffective.

AI use is outpacing policy and governance

Posted 5 days ago by Phil Alsop
The majority (83%) of IT and business professionals in Europe believe employees in their organisation are using AI.

Fierce competition in global AI leadership

Posted 5 days ago by Phil Alsop
More than four out of five of CEOs and IT executives surveyed are driving AI growth for their companies.
Distributor looks to the future and shares channel growth and transformation drivers as it celebrates its 40th birthday.