Security1 hOctober 28, 2026, 21:00

OWASP flags abandoned AI agent access keys that stay active

The New Stack detailed how stale credentials of AI agents persist: AWS IAM access keys never expire automatically and keep working after their tasks end. OWASP ranked improper offboarding of non-human identities first in its 2025 Top 10. CloudQuery SQL queries are provided to find active keys older than 90 days with no recent use.

The New Stack

Open source

OWASP flags abandoned AI agent access keys that stay active

AWS IAM access keys never expire and stay valid until disabled
OWASP ranked poor non-human identity offboarding as the top 2025 risk
CloudQuery query finds active keys older than 90 days unused
GreyNoise: AI campaign hit PaperCut, compromising 11 orgs in 26 seconds

#AWS#OWASP#CloudQuery

Reco: about 1,000 AI products stay invisible to corporate access systems

Security

Three Artifactory flaws under active exploitation allow auth bypass and admin access

Science

EPFL builds chip laser that stays frequency-locked without active control

Security

OWASP flags abandoned AI agent access keys that stay active

Reco: about 1,000 AI products stay invisible to corporate access systems

Three Artifactory flaws under active exploitation allow auth bypass and admin access

EPFL builds chip laser that stays frequency-locked without active control

OWASP: AI agents exceed scope due to missing boundaries