Security Leaders Say Machine Identities – Such as Access Tokens and Service Accounts – Are Next Big Target for Cyberattack

Business Wire12-16

Infographic: The Impact of Machine Identities on the State of Cloud Native Security in 2024 (Graphic: Business Wire) New Venafi Research Reveals 86% of Organizations Had a Cloud Native-Related ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2491945616?lang=en_US&edition=fundamental","thumbnail":"https://s.yimg.com/uu/api/res/1.2/NbV7NIdv6K.Z3UiTsQSKuA--~B/aD00MzYwO3c9NjAwO2FwcGlkPXl0YWNoeW9u/https://media.zenfs.com/en/business-wire.com/cdde9c5a2a1afa42142c9fc8bdb06117","is_english":true,"pubTime":"2024-12-16 22:00","share_image_url":"https://static.laohu8.com/5f26f4a48f9cb3e29be4d71d3ba8c038","id":"2491945616","market":"us","top_or_hot":-1,"title":"Security Leaders Say Machine Identities – Such as Access Tokens and Service Accounts – Are Next Big Target for Cyberattack","media":"Business Wire","content":"<div>\n<p>Infographic: The Impact of Machine Identities on the State of Cloud Native Security in 2024 (Graphic: Business Wire)\n \n\n\n\n\n\nNew Venafi Research Reveals 86% of Organizations Had a Cloud Native-Related ...</p>\n\n<a href=\"https://finance.yahoo.com/news/security-leaders-machine-identities-access-140000066.html\">Source Link</a>\n\n</div>\n","source":"yahoofinance","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Security Leaders Say Machine Identities – Such as Access Tokens and Service Accounts – Are Next Big Target for Cyberattack</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nSecurity Leaders Say Machine Identities – Such as Access Tokens and Service Accounts – Are Next Big Target for Cyberattack\n</h2>\n\n<h4 class=\"meta\">\n\n\n2024-12-16 22:00 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://finance.yahoo.com/news/security-leaders-machine-identities-access-140000066.html><strong>Business Wire</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Infographic: The Impact of Machine Identities on the State of Cloud Native Security in 2024 (Graphic: Business Wire)\n \n\n\n\n\n\nNew Venafi Research Reveals 86% of Organizations Had a Cloud Native-Related ...</p>\n\n<a href=\"https://finance.yahoo.com/news/security-leaders-machine-identities-access-140000066.html\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"BK4097","symbol_name":"系统软件","start_time":0,"source_url":"https://finance.yahoo.com/news/security-leaders-machine-identities-access-140000066.html","article_id":"2491945616","we_media_id":null,"thumbnails":["https://s.yimg.com/uu/api/res/1.2/NbV7NIdv6K.Z3UiTsQSKuA--~B/aD00MzYwO3c9NjAwO2FwcGlkPXl0YWNoeW9u/https://media.zenfs.com/en/business-wire.com/cdde9c5a2a1afa42142c9fc8bdb06117"],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=2491945616","pubTimestamp":1734357600,"columns":[],"sourceInfo":{"source_id":"yahoofinance","name":"雅虎金融"},"weMediaInfo":null,"summary":"Infographic: The Impact of Machine Identities on the State of Cloud Native Security in 2024 . New Venafi Research Reveals 86% of Organizations Had a Cloud Native-Related Security Incident in the Last Year – Leading to Costly Delays, Outages and Data Breaches. SALT LAKE CITY, December 16, 2024----Venafi, a CyberArk  company, today announced the findings of its latest research report: The Impact of Machine Identities on the State of Cloud Native Security in 2024. Surveying 800 security and IT decision-makers from large organizations across the U.S., U.K., France and Germany, this second annual report examines the top machine identity security trends and challenges impacting the state of cloud native security today.This year’s findings reveal attackers are compromising cloud native environments with alarming regularity. 86% of organizations had a security incident related to their cloud native environment within the last year. As a result, 53% of organizations had to delay an application ","collect":0,"end_time":0,"defaultTopTitle":"yahoo.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"BK4097":"系统软件","LU2065731478.USD":"ALLSPRING (LUX) WORLDWIDE FUND - SMALL CAP INNOVA \"I\" (USD) ACC","BK4560":"网络安全概念","LU2286300806.USD":"Allianz Cyber Security AT Acc USD","CYBR":"Cyber-Ark Software","CLM":"Cornerstone Strategic Value Fund","LU2491049909.HKD":"WELLINGTON SUSTAINABLE OUTCOMES \"A\" (HKD) ACC","LU0107464264.USD":"abrdn SICAV I - GLOBAL INNOVATION EQUITY \"A\" (USD) ACC","LU2491050071.SGD":"WELLINGTON SUSTAINABLE OUTCOMES \"A\" (SGDHDG) ACC","LU2491050154.USD":"WELLINGTON SUSTAINABLE OUTCOMES \"A\" (USD) ACC","PHH":"Park Ha Biological Technology Co. Ltd.","LU0566484027.USD":"安本美国小盘成长股","LU2125909759.SGD":"Natixis Thematics Safety H-R/A SGD","LU2125909916.SGD":"Natixis Thematics Safety R/A SGD","LU1559883803.SGD":"Aberdeen Standard SICAV I - North American Smaller Companies Fund A Acc SGD-H","LU1923622291.USD":"Natixis Thematics Safety R/A USD","SG9999000418.SGD":"Aberdeen Standard Global Technology SGD","WRD":"文远知行","LU0053671581.USD":"摩根大通美国小盘成长股 A(dist)"},"translate_title":"安全领导者表示，机器身份（例如访问令牌和服务帐户）是网络攻击的下一个大目标","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"WRD":1,"CLM":1,"PHH":1,"CYBR":0.9},"content_text":"Infographic: The Impact of Machine Identities on the State of Cloud Native Security in 2024 (Graphic: Business Wire)\n \n\n\n\n\n\nNew Venafi Research Reveals 86% of Organizations Had a Cloud Native-Related Security Incident in the Last Year – Leading to Costly Delays, Outages and Data Breaches\nSALT LAKE CITY, December 16, 2024--(BUSINESS WIRE)--Venafi, a CyberArk (NASDAQ: CYBR) company, today announced the findings of its latest research report: The Impact of Machine Identities on the State of Cloud Native Security in 2024. Surveying 800 security and IT decision-makers from large organizations across the U.S., U.K., France and Germany, this second annual report examines the top machine identity security trends and challenges impacting the state of cloud native security today.\nThis year’s findings reveal attackers are compromising cloud native environments with alarming regularity. 86% of organizations had a security incident related to their cloud native environment within the last year. As a result, 53% of organizations had to delay an application launch or slow down production time; 45% suffered outages or disruption to their application service; and 30% said attackers could gain unauthorized access to data, networks and systems.\nOther key findings include:\n\nService accounts are the next threat frontier: 88% of security leaders believe machine identities – specifically access tokens and their connected service accounts – are the next big target for attackers. Over half (56%) have experienced a security incident related to machine identities using service accounts in the last year.\n\n\nSupply chain attacks tipped to get an AI makeover: 77% of security leaders think AI poisoning will be the new software supply chain attack. A further 84% believe supply chain attacks remain a clear and present danger. However, a worrying 61% say senior management has taken its focus off supply chain security in the last year.\n\n\nSecurity and developer teams continue to clash: 68% of security leaders believe security professionals and developers will always be at odds, with 54% feeling they are fighting a losing battle trying to get developers to have a security-first mindset.\n\n\"The sleeping dragon is now awake: attackers are now actively exploring cloud native infrastructure,\" said Kevin Bocek, Chief Innovation Officer at Venafi, a CyberArk Company. \"A massive wave of cyberattacks has now hit cloud native infrastructure, impacting most modern application environments. To make matters worse, cybercriminals are deploying AI in various ways to gain unauthorized access and exploiting machine identities using service accounts on a growing scale. The volume, variety and velocity of machine identities are becoming an attacker’s dream.\"\nAI threats loom large on the horizon\nRespondents also reported the risk of cloud native security coming under increasing pressure as attackers target these environments to compromise AI models and applications:\n\n77% are concerned about AI poisoning, whereby AI data inputs/outputs are manipulated for malicious purposes.\n75% are worried about model theft.\n73% are concerned about the use of AI-led social engineering.\nA further 72% are worried about provenance in the AI supply chain.\n\n\"There is huge potential for AI to transform our world positively, but it needs to be protected,\" Bocek continues. \"Whether it’s an attacker sneaking in and corrupting or even stealing a model, a cybercriminal impersonating an AI to gain unauthorized access, or some new form of attack we have not even thought of, security teams need to be on the front foot. This is why a kill switch for AI – based on the unique identity of individual models being trained, deployed and run – is more critical than ever.\"\nMachine identity security complexity is growing\nThe research also provided insights into which areas in cloud native infrastructure organizations have experienced security incidents. Machine identities like access tokens used with service accounts topped the list with 56%, but almost as many (53%) experienced incidents related to other machine identities, such as certificates.\nPart of the reason these incidents occur with such regularity is the growing complexity of cloud native environments. This creates new challenges for security teams around managing and securing the machine identities that underpin access and authentication in cloud native environments:\n\n74% of security leaders agree that humans are the weakest link in machine identity security. 83% of teams recognize that failing to secure machine identities at the workload level renders all other security obsolete.\n\n\n69% say that delivering secure access between their cloud native and data center environments is a \"nightmare to manage,\" while 89% are experiencing challenges around managing and securing secrets at scale.\n\n\n83% think having multiple service accounts also creates a lot of added complexity, but most (91%) agree that service accounts make it easier to ensure that policies are uniformly defined and enforced across cloud native environments.\n\nBocek concludes: \"Attackers are increasingly zoning in on machine identities in cloud native technologies. Security teams must prioritize machine identity security to the same degree as human identities. The great news is that secrets management, certificate lifecycle management (CLM) and cloud native security are available today. An automated, end-to-end machine identity security program means businesses can enhance their cloud native security, ensuring operational stability and business growth.\"\nTo read the full report, please visit https://venafi.com/lp/cloud-native-security-report-2024/.\nAdditional Resources:\n\nInfographic\nBlog post\n\nAbout Venafi, a CyberArk Company\nVenafi, a CyberArk company, offers the most comprehensive solutions to address critical challenges in PKI, certificate management and workload identity management. Through centralized visibility and automation, Venafi helps customers monitor and secure any machine identity, anywhere, across extended enterprise networks. As an innovative leader, Venafi solves today’s greatest machine identity challenges while anticipating those of tomorrow.\nBy combining Venafi’s best-in-class machine identity management with CyberArk’s leading identity security capabilities, these two category creators together establish the world’s first platform for end-to-end machine identity security at enterprise scale. To learn more about CyberArk’s acquisition of Venafi, read the press release.\nFor more information about Venafi, visit https://venafi.com/.\nAbout CyberArk\nCyberArk (NASDAQ: CYBR) is the global leader in identity security. Centered on intelligent privilege controls, CyberArk provides the most comprehensive security offering for any identity – human or machine – across business applications, distributed workforces, hybrid cloud environments and throughout the DevOps lifecycle. The world’s leading organizations trust CyberArk to help secure their most critical assets. To learn more about CyberArk, visit https://www.cyberark.com, read the CyberArk blogs or follow on LinkedIn, X, Facebook or YouTube.\nView source version on businesswire.com: https://www.businesswire.com/news/home/20241216555147/en/\nContacts\nMedia Contact Pauline Louiepauline.louie@cyberark.com (801) 676-6900","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"deviceId":"web-server-community-laohu8-v3","version":"4.29.3","shortVersion":"4.29.3","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2491945616"}