Developers, automated tools and AI coding agents hold permissions that can outlast the work they were granted for. Without access reviews, organizations can leave accounts able to copy or change company code after the work ends, according to BlueFlag Security’s The State of Developer Risk 2026 report. Development accounts and tools create security blind spots Software development spans code repositories, review systems, build pipelines and connected applications. Developers, contractors, service accounts, bots and AI coding … More
The post 99% of repository access tokens never expire appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
Cyberhaven launches Agentic Data Security to track and control AI data use
Vercel ties login sessions to devices, rolls out AI security reviews in public beta
Arkose Labs expands Agent Trust Manager to govern agent sessions