{"id":45823,"date":"2022-03-22T14:00:00","date_gmt":"2022-03-22T14:00:00","guid":{"rendered":"https:\/\/www.darkreading.com\/application-security\/the-secret-to-zero-trust-you-need-to-know"},"modified":"2022-03-22T14:00:00","modified_gmt":"2022-03-22T14:00:00","slug":"the-secret-to-zero-trust-you-need-to-know","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/the-secret-to-zero-trust-you-need-to-know\/","title":{"rendered":"The Secret to Zero Trust You Need to Know"},"content":{"rendered":"
<\/div>\n

In today’s digital businesses, we rely on commercially procured or internally developed applications.<\/p>\n

Because of the need for more speed and more routes to market a variety of things, we have an increasingly automated IT infrastructure that is fundamentally built upon a potentially weak security posture.<\/p>\n

While application needs and capabilities and IT environments vary significantly among organizations, one thing remains true everywhere: Every application, script, automation tool, and other non-human entity relies on some form of a “secret” \u2014 or privileged credential<\/a> \u2014 to access other tools, applications, and data.<\/p>\n

Those secrets and access are quite literally rocketing around our infrastructures and networks at the speed of light and are also a single point of failure.<\/p>\n

Before we get too far down this rabbit hole, let’s be clear about what a secret is. A secret is a non-human, privileged credential and refers to a private piece of information that is a key, whose sole purpose is to unlock a protected resource or sensitive information in a tool, application, container, or cloud-native environment.<\/p>\n

Some of the most common types of secrets include:<\/p>\n