Join our Newsletter — 33% off our NHI Course

The Non-Human & AI Identity Journal – Edition 61

Welcome to the latest edition of our Non-Human & AI Identity Journal, where we cover:

• What is the NHI Mgmt Group up to?
• The Non-Human & AI Identity Podcast
• Our pick from our Non-Human & AI Identity Forum
• Recent Breaches and Security Incidents
• Upcoming Events, Webinars, Industry Announcements
­

⭐ What’s Happening at the NHI Mgmt Group

Live Webinar – Beyond Human: NHI & AI Identity (2026-07-09) — Virtual

Join us on July 9th for our exciting live webinar, “Beyond Human: NHI & AI Identity,” where our founder, Lalit Choda, will engage in a dynamic discussion with Clarity Security CEO Alexis Moyse. This virtual event promises to be an invaluable opportunity for NHI and machine identity professionals to gain insights into the future of identity governance.

­

🎙 The Non-Human & AI Identity Podcast

The latest episode of The Non-Human & AI Identity Podcast is now available.

Join Eve Maler, President of Venn Factory, as she delves into the critical issue of identity security in the agentic AI era. Discover why identity must evolve from an IT control to a board-level strategic function and the challenges of ensuring agent authority. Learn about the Four Ps framework and the concept of the “ultimate bot owner” in securing non-human identities. Watch the episode here.

Catch up on previous episodes here and join the conversation shaping the future of NHI security.

­

🚨 Recent NHI & Identity Security Breaches

Coupang Signing Key Breach: Unrevoked Credentials Expose 33.7 Million Records After Employee Offboarding

In 2025, Coupang, South Korea’s leading e-commerce platform, experienced a significant data breach due to a lapse in NHI lifecycle management. A former employee retained active signing keys, which were neither rotated nor revoked post-departure, leading to the unauthorized access and exfiltration of 33.7 million customer records over five months. This incident underscores the critical need for robust offboarding procedures for non-human credentials, such as API keys and service accounts, to prevent unauthorized access and potential data breaches. Security professionals must prioritize comprehensive management of NHIs to mitigate similar risks.

­

💬 NHI & AI Identity Forum

Our suggested reading for this week from our forum — with over 10,500 articles about NHIs, including Agentic AI.

Secrets and NHI convergence: what it means for IAM teams — Akeyless
Automating User Lifecycle Management (JML): How JML Strengthen Identity Security & Compliance — Clarity Security
SOC 2 automation and the governance gap IAM teams miss — Unosecur
Inside the 48-Hour Supply Chain Attack Spree Across npm, PyPI, and Docker Hub — GitGuardian
Why Privileged Access Tech Fails as Environments Evolve — P0 Security
MCP identity propagation: what it means for IAM teams — Teleport
Identity, trust and governance: what IAM teams need to rebuild — ConductorOne
Mastering Least Privilege for Non-Human Identities in Cloud Systems — Token Security
Agentic identity governance: what it means for IAM teams — Lumos
Risk-based authentication and biometrics: are your controls keeping up? — iProov
AI agent access control is the governance gap teams are missing — PlainID
Azure AD app credential expiry: what IAM teams are missing — EmpowerID
Behavioral signals for authorization: what IAM teams need now — Opal Security
SSO integration quickstart: are your login controls actually precise? — Scramble ID
­

🏴 Latest Industry Announcements

Akeyless — AI agent identity risk and runtime access control: what changes now?
Unosecur — AI agent dashboards: what visibility do IAM teams actually need?
Clarity Security — Clarity Aperture and adaptive trust: what changes for IAM teams?
Arkose Labs — Reverse-proxy phishing and MFA compromise: what teams need to know
Token Security — Active Directory NHI visibility gaps: what IAM teams miss
Oligo Security — Runtime exploit blocking for AI-era apps: are your controls keeping up?
TROJ.AI — AI gateway plus runtime defense: what changes for AI teams?
­

📅 Upcoming Events & Webinars

Webinar

Developer endpoint secrets visibility on July 29, 2026

By GitGuardian

Webinar

Risk-first identity security: what changes for IAM teams?

By Clarity Security

Webinar

EU AI Act enforcement on Aug. 2, 2026: are agent controls ready?

By Zenity

Conference

AI regulation and browser visibility: what IAM teams are missing

By Push Security

­

🎓 Training & Certification

Our CPD Certified NHI Foundation Level course delivers practical guidance on governing, managing, and securing NHIs, including AI agents. Developed by Mr NHI, it’s designed for beginners, security professionals, and IT leaders, with hundreds of learners and an average 5-star rating.

Enrol here

­

📅 Are you planning a NHI Program in 2026 including Agentic AI?

As the premier authority on Non-Human Identities, with over 20 years of hands-on experience managing $10M–$20M+ global NHI programs, we offer independent guidance and advice tailored to your needs. Our expertise spans risk and maturity assessments, program initiation and hands-on execution, ensuring your organisation stays ahead of evolving threats and maximises risk reduction. Book below for a free initial consultation.

Book here

­

Lalit Choda
Founder of the NHI Mgmt Group

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.