Non-Human-Identity

4 reports

All LLM Security Agentic AI Industry News Research Supply Chain Prompt Injection First Look: Security Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning AI Security Tools Security Operations

Netwrix Analysis: AI Agents Widen the Non-Human Identity Gap

FIRST LOOK ATLAS OWASP HIGH ▲ 8.2 BleepingComputer Jul 11, 2026

A Netwrix-sponsored analysis highlights how AI agents are rapidly proliferating machine identities inside enterprise environments, creating credentials and inheriting permissions far faster than existing identity governance can track. The core risk is that AI agents operate outside traditional human-lifecycle identity controls, leaving security teams unable to enumerate what exists, who owns it, or what it can access. Defenders face an expanding blind spot where a single compromised agent credential can chain laterally across cloud services, SaaS platforms, and secrets stores — as demonstrated by the UNC6395/Drift OAuth campaign against Salesforce environments in 2025.

IGA Platforms Add AI Agent Governance and Access Control

FIRST LOOK ATLAS OWASP HIGH ▲ 7.8 The Hacker News Jul 03, 2026

A new analysis published via The Hacker News details how traditional Identity Governance and Administration (IGA) frameworks — built around HR-driven, human-centric lifecycle events — are fundamentally unequipped to govern AI agents acting as autonomous principals in enterprise environments. Security teams face a growing blind spot: AI agents acquire, retain, and exercise entitlements without triggering the joiner-mover-leaver workflows, manager attestations, or termination events that IGA tooling depends on. Defenders must now treat AI agent identities as a separate governance tier, requiring purpose-built provisioning, audit, and deprovisioning logic that existing platforms like Workday, SailPoint, and Azure AD connectors were never designed to provide.

Token Security Publishes Agentic AI Identity Risk Analysis

FIRST LOOK ATLAS OWASP HIGH ▲ 8.2 BleepingComputer Jun 30, 2026

Token Security has published a detailed analysis of the identity and access management failures emerging as agentic AI systems proliferate across enterprise environments, highlighting how AI agents authenticate, hold credentials, and act autonomously across production systems without adequate oversight. Unlike traditional machine identities, AI agents combine human-like goal-directed behaviour with machine-speed execution, creating credential sprawl that existing IAM programs were never designed to govern. Security teams face a compounding risk: agents are being provisioned with overprivileged OAuth grants, API tokens, and cloud roles that remain unreviewed and unrevoked long after the original use case has expired.

Cisco, Check Point M&A Targets AI Agent Identity Gaps

ATLAS OWASP MEDIUM ▲ 6.2 SecurityWeek Jun 08, 2026

May 2026 saw a wave of cybersecurity acquisitions with a clear focus on securing AI agents and LLM infrastructure, including Cisco's ~$400M acquisition of Astrix Security for non-human identity management and Check Point's acquisition of Deepchecks for LLM evaluation and continuous monitoring. Akamai also moved to acquire LayerX for AI usage control and agentic activity visibility across browsers and IDEs. These deals signal that enterprise security vendors are racing to build defensive capabilities around the expanding agentic AI attack surface.

Non-Human-Identity

Netwrix Analysis: AI Agents Widen the Non-Human Identity Gap

IGA Platforms Add AI Agent Governance and Access Control

Token Security Publishes Agentic AI Identity Risk Analysis

Cisco, Check Point M&A Targets AI Agent Identity Gaps

Stay ahead of the threat.