Understanding OWASP’s Top 10 list of non-human identity critical risks | CSO Online
OWASP’s new Top 10 list highlights the security risks associated with non-human identities (NHIs), which outnumber human identities in organizations. The list includes risks such as improper offboarding, secret leakage, and overprivileged NHIs, which can lead to data breaches and lateral movement. Mitigations include implementing standardized offboarding processes, using ephemeral credentials, and enforcing the principle of least privilege.