CyberArk Labs unveiled new research exploring the threat of shadow admins in cloud environments at RSA Conference. Shadow admin accounts have sensitive privileges and are typically overlooked because they are not members of a privileged Active Directory (AD) group. Shadow admins can easily use these permissions to hide stealthy shadow entities that remain hidden until they are used as backdoor accounts allowing access to the network. Organizations must make sure these privileged entities are well secured with strong, frequently-enabled multi-factor authentication and close-to-factor monitoring.”]