THREATNOIR
Subscribe
Back to Feed
Threat IntelligenceJul 28, 2026

Ghost Credentials Expose Cloud Systems to Hidden Identity Risks

Dormant non-human identities pose cloud security risks; new tool finds them.

Read at source

Summary

Security researcher Aleksandr Krasnov has identified a significant security blind spot in cloud environments related to dormant non-human identities (NHIs). These 'ghost credentials' can still grant access and create exploitable trust paths, even if they are no longer actively managed or monitored. To address this, Krasnov has released NHI Hound, an open-source tool designed to help organizations discover and manage these hidden identity risks.

Entities

NHI Hound (product)non-human identities (technology)cloud systems (technology)