|
Welcome to the latest edition of our Non-Human & AI Identity Journal, where we cover:
|
| |
|
⭐ What’s Happening at the NHI Mgmt Group |
|
Last week we hosted the massive Non-Human & AI Identity Summit at Pavilion at Identiverse, Las Vegas, with close to 300 folks attending the summit with 8 sessions and 25 industry leaders. We then hosted a further 12 sessions at the only dedicated pavilion, all about NHIs and the intersection with Agentic AI. Feedback overall was overwhelming; we received amazing feedback on the content, insights and what folks learned and took away from the summit. CSA Keynote – Humans & Now Agents: The NHI Internal Threat Amplified (2026-06-24) — Virtual Our founder, Lalit Choda, delivered a keynote talk at the Cloud Security Alliance Agentic AI Security Summit on June 24, 2026. In his talk, “Humans & Now Agents: The NHI Internal Threat Amplified”. |
| |
|
🎓 Training & Certification |
|
As part of celebrating our huge NHI & AI Identity Summit and Pavilion at Identiverse last week, we are offering a special 33% discount on our CPD Certified NHI Foundation Level course. The course is the most comprehensive and only accredited course in the industry, 5-star rated, that delivers practical guidance on governing, managing, and securing NHIs, including AI agents. Use discount code IDV33OFF. |
| |
|
🎙 The Non-Human & AI Identity Podcast |
|
Mr. NHI’s Human Identity in the Hot Seat David Lee is in the hot seat this week! As Field CTO at Saviynt, he tackles 10 rapid-fire questions on identity risks that enterprises can no longer ignore. The discussion ranges from unmanaged NHIs to whether AI agents should be viewed as employees or software, highlighting critical governance failures. Lee’s insights delve into whether AI agents should undergo the same scrutiny as human users and the security lapses arising from the rush to deploy agentic AI. Watch the episode here. Catch up on previous episodes here and join the conversation shaping the future of NHI security. |
| |
|
🚨 Recent NHI & Identity Security Breaches |
|
Klue OAuth Supply Chain Breach: How Stolen SaaS Credentials Hit 700+ Organisations In June 2026, a breach involving Klue, a market intelligence SaaS platform, exposed OAuth tokens, granting unauthorized access to over 700 organizations’ Salesforce environments. The attack highlighted the risk of long-lived OAuth tokens, which were stored without adequate rotation or expiration policies, leading to a significant supply chain incident. This breach underscores the critical need for security professionals to implement stringent governance over API credentials and regularly audit integration points to minimize the risk of broad unauthorized access. Mastra npm Supply Chain Attack: North Korea’s Sapphire Sleet Backdoors 144 AI Packages in 88 Minutes On June 17, 2026, North Korea’s Sapphire Sleet group executed a sophisticated supply chain attack on the Mastra AI framework, compromising 144 npm packages by exploiting a stale contributor account with unrevoked publish permissions. The attack involved publishing a trojanized npm package that targeted LLM API keys, cloud credentials, and other sensitive machine identities, executing upon installation and then self-deleting. This incident underscores the critical need for rigorous credential management and automated offboarding processes in software supply chains to prevent similar breaches and protect valuable non-human identities. |
| |
| |
|
🏴 Latest Industry Announcements |
||||||||||
|
| |
|
📅 Upcoming Events & Webinars |
||||||||||||||||||||
|
| |
|
📅 Are you planning a NHI Program in 2026 including Agentic AI? |
|
As the premier authority on Non-Human Identities, with over 20 years of hands-on experience managing $10M–$20M+ global NHI programs, we offer independent guidance and advice tailored to your needs. Our expertise spans risk and maturity assessments, program initiation and hands-on execution, ensuring your organisation stays ahead of evolving threats and maximises risk reduction. Book below for a free initial consultation. |
| |
|
Lalit Choda |