Security news

AI 2026-11-06 · 4 d ago Source: Help Net Security

99% of repository access tokens never expire

99% of repository access tokens never expire

Summary

Developers, automated tools and AI coding agents hold permissions that can outlast the work they were granted for. Without access reviews, organizations can leave accounts able to copy or change company code after the work ends, according to BlueFlag Security’s The State of Developer Risk 2026 report. Development accounts and tools create security blind spots Software development spans code…

For more information, read the full story at the original source: Help Net Security ↗