Third-Party Credentials and Vendor Risk: Safeguard Your Applications | UpGuard

This article outlines the risks of exposed third-party application credentials, highlighting common leakage vectors—plain-text documents and credentials embedded in code—and recommending mitigations such as secure secret storage (e.g., Vault or Secret Server), using least-privilege accounts, and auditing vendors (including verifying 2FA support) to reduce third-party risk.