Ghost Credentials Expose Cloud Systems to Hidden Identity Risks

Newseze Wire·Tue, Jul 28, 9:33 PMWire: Dark Reading

Security researcher Aleksandr Krasnov reveals dormant non-human identities can create security blind spots and releases NHI Hound, an open source tool to sniff out trust paths.

Sourcing & attribution. Newseze provides AI-curated summaries, narrative framing, and editorial analysis. The underlying reporting was contributed by Dark Reading; tap “Open original source” above to read their full reporting and support the contributing newsroom directly.

Newseze Analysis420 words · original commentary

# Ghost Credentials Expose Cloud Systems to Hidden Identity Risks Cloud infrastructure relies on machine-to-machine authentication through non-human identities (NHIs)—service accounts, API keys, and role-based credentials that enable automated systems to communicate and perform tasks. A security researcher has identified a significant oversight: many organizations lose track of these dormant identities over time, creating what amounts to unlocked doors in their digital architecture. The problem isn't theoretical. Abandoned credentials can persist across infrastructure redesigns, departures, and system migrations, leaving pathways that attackers could exploit if discovered. The researcher has released an open-source scanning tool designed to help organizations inventory these hidden trust relationships before they become security liabilities. The significance of this finding lies in the operational reality of modern cloud environments. As systems scale and teams evolve, service accounts and API credentials are often created for temporary integrations or deprecated services—then forgotten. Unlike human accounts that trigger offboarding procedures, these non-human identities frequently escape regular security audits. An attacker gaining access to a forgotten service account could potentially move laterally through the network or escalate privileges without triggering the monitoring systems designed to catch anomalous human behavior. The research highlights what amounts to a gap between cloud security theory and practice: many organizations have governance frameworks for user access but lack equivalent rigor for machine identities. The release of NHI Hound—an open-source tool for mapping these hidden trust relationships—offers practical value for security teams. By identifying dormant credentials and the paths they can access, organizations gain visibility into attack surfaces they likely didn't know existed. This reflects a broader industry maturation: security increasingly requires not just better defenses, but better inventory. The tool's availability as open-source rather than commercial software signals that the security community views this as a foundational need rather than a premium service. The quality of this finding depends on real-world adoption and whether the tool accurately identifies credential relationships across diverse cloud platforms, but the underlying premise—that forgotten machine identities represent genuine risk—aligns with established security principles. **Worth knowing:** The research underscores a persistent gap between cloud security aspirations and day-to-day operational reality. Organizations optimizing for speed and flexibility during cloud migration often deprioritize credential housekeeping. This isn't usually negligence; it's the accumulation of small decisions during rapid scaling. As cloud adoption matures, the unsexy work of identity inventory and hygiene has become as critical as encryption or network segmentation. Teams responsible for cloud security should treat machine identity lifecycle management—creation, monitoring, and retirement—with the same rigor applied to user access control. **Reporting:** Dark Reading.

Ask Us · Any Story, Any AnswerBe the first to ask

Newseze's algorithm reads the story and answers your question — calmly, factually, with source attribution. No comments, no flame wars — just answers.

No questions yet. Be the first.

Answers reflect Newseze's editorial framework applied under fair use (17 U.S.C. § 107). Not financial, legal, medical, or tax advice. Hate speech and racial slurs are blocked.

Ghost Credentials Expose Cloud Systems to Hidden Identity Risks

Related stories