Latest news with #IdentitySecurityRisk
Channel Post MEA
3 days ago
- Business
- Channel Post MEA
BeyondTrust Expands Identity Security Insights Solution
BeyondTrust has announced the expansion of its Identity Security Insights solution to include Secrets Insights, a new capability designed to illuminate and secure the hidden attack surfaces created by secrets and non-human identities. As Agentic AI systems begin to autonomously interact with infrastructure, make decisions, and even provision access themselves, the hidden risks posed by unmanaged secrets and non-human identities become exponentially more dangerous. This launch comes on the completion of the initial class of Identity Security Risk Assessment engagements conducted across a wide range of industries and company sizes. The results are eye-opening: Dormant service accounts with privilege were found in over 70% of environments Overly permissive Entra Service Principals create direct pathways to Global Admin privileges, exposing entire Microsoft 365 environments to potential takeover Credentials reused across multiple service accounts by human admins, enabling a single compromised password to compromise numerous non-human accounts Low-privileged users can escalate to administrative access across Active Directory, Entra, AWS, Okta, and GitHub through hidden privilege escalation paths built on configuration oversights, federation, synchronization AD Service accounts bridge on-premises and cloud environments with Active Directory accounts holding privileged Entra roles, creating cross-platform attack vectors Ineffective GitHub repository access management, leading to uncontrolled secret access and unauthorized access to sensitive code, often accessible through personal Github accounts 'These identity infrastructure issues aren't just misconfigurations, they're invitations,' said Marc Maiffret, CTO at BeyondTrust. 'Our Identity Security Risk Assessment data shows that many organizations lack the complete story when it comes to their identity attack surface. For many, overlooked hygiene issues silently open the door to attackers. And with the rise of Agentic AI, the stakes have never been higher, especially as most organizations lack visibility into how compromised accounts can be leveraged to seize control of application secrets, which often carry elevated privileges.' The new Secrets Insights capability builds on the success of BeyondTrust's Identity Security Insights platform, which already provides deep visibility into Active Directory, Entra ID, AWS, Azure, Google Cloud Platform, Okta, and Ping Identity, and GitHub. Now, organizations can extend that same level of insight to secrets, such as API keys, service account credentials, tokens, and more, across hybrid and multi-cloud environments and their vaults. Key Benefits of Secrets visibility: Discovery of unmanaged secrets across cloud and on-prem environments Discovery of users with direct and indirect access to secrets Risk scoring and prioritization based on exposure and privilege level Integration with BeyondTrust Password Safe for automated remediation 'As organizations embrace automation and Agentic AI, securing the invisible layers of access — secrets, tokens, and service identities — will define the next frontier of identity security', said Maiffret. Secrets Insights will be available later this year. BeyondTrust continues to offer complimentary Identity Security Risk Assessments, often completed in less than 48 hours, to qualified organizations, helping them uncover hidden privilege and secrets risks and chart a path toward Zero Standing Privilege (ZSP) and Just-in-Time (JIT) access.
TECHx
29-04-2025
- Business
- TECHx
BeyondTrust Offers Free Identity Risk Assessment
Home » Emerging technologies » Cyber Security » BeyondTrust Offers Free Identity Risk Assessment BeyondTrust has launched a free Identity Security Risk Assessment to help organizations uncover identity-related risks. The service highlights hidden attack paths, helping security teams reduce vulnerabilities across hybrid environments. Modern identity systems span cloud, on-prem, and hybrid setups. With growing numbers of accounts and entitlements, identity security is harder to manage. Attackers now exploit identity as the primary entry point. In fact, 90% of organizations faced an identity-related incident in the past year. The new assessment is designed to deliver quick, actionable insights. It connects to identity platforms in under an hour and reveals security gaps within 24 hours. Key features: Fast integration with Active Directory, Entra ID, Okta, Ping, and more with Active Directory, Entra ID, Okta, Ping, and more Complete visibility into identity attack surfaces into identity attack surfaces Insightful reports on high-risk identities and unused accounts The tool is powered by BeyondTrust's Identity Security Insights. It uses AI to analyze identity data and detect privilege escalation paths. The goal is to make advanced identity risk analysis accessible—without the high costs. Sam Elliott, SVP of Products at BeyondTrust, said: 'Many organizations lack visibility into identity risk. This free assessment helps them understand and reduce that risk quickly and easily.' By offering the Identity Security Risk Assessment at no cost, BeyondTrust aims to improve security awareness and readiness across industries. Interested organizations can sign up here:
