Datadog warns about vulnerabilities and cloud keys
The State of Cloud Security 2026 report analyses serious flaws and long-lived credentials. Its findings apply to the sample studied, not to all businesses.
News summary
Datadog published its State of Cloud Security 2026 report on 10 November. According to the company, the median number of high- or critical-severity vulnerabilities in the cloud services analysed rose from four in February to around sixteen in November. The figure describes its dataset and should not be presented as a measurement of the entire cloud or of Spanish businesses.
The report also highlights the use of long-lived keys to access AI services. If an application is compromised, its credentials may allow access to other systems for as long as they remain active. Patching the application and limiting the permissions of its identities are complementary controls, not alternatives.
To prioritise within an SME, a list of vulnerabilities needs context: internet exposure, availability of a fix, privileges and accessible data. A high count does not, by itself, explain which system should be reviewed first.
Source: Datadog — 10 November 2026
What to check in your business
Cross-reference the inventory of flaws with each application's exposure and criticality.
- Update components after testing and verify that the fixed version is deployed.
- Review cloud and AI keys; limit permissions and replace permanent credentials with temporary ones where feasible.
Concepts mentioned in this article: Cloud
At Seintec, we work with you to review your systems' dependencies, access and continuity so you can prioritise improvements on an informed basis. Contact our team.
Contact SeintecRelated service
Cybersecurity
Protection to reduce risks and disruption.