Join our Newsletter — 33% off our NHI Course

The Non-Human & AI Identity Journal – Edition 63

Welcome to the latest edition of our Non-Human & AI Identity Journal, where we cover:

• Mr. NHI’s Keynote at Identiverse & CSA Agentic AI Summit
• Major acquisitions in NHI, Identity & ITDR space & Agentic releases
• Our pick from our Non-Human & AI Identity Forum
• Recent Breaches and Security Incidents
• Upcoming Events, Webinars, Industry Announcements
­

⭐ What’s Happening at the NHI Mgmt Group

KeyNote – Humans and now Agents: The NHI Internal Threat Amplified

I recently gave a keynote at Identiverse and CSA’s Agentic AI Summit, where I talk about how AI agents are fundamentally changing the insider threat model, why traditional security assumptions are becoming obsolete, and why some of the most significant security risks may come from amplified capability misuse and accidents inside organizations rather than external attackers. Watch the episode here.

Catch up on our Non-Human & AI Identity Podcast here and join the conversation shaping the future of NHI security.

Identity, NHI & Agentic related Acquisitions

Our LI post on the identity landscape experiencing a massive platform consolidation, went viral. Major security networks, cloud frameworks, and identity providers are aggressively absorbing specialized non-human identity (NHI) and identity threat detection (ITDR) start-ups. The article shares 10 recent acquisitions as well as 5 major product announcements around enterprise AI security capabilities.

­

🚨 Recent NHI & Identity Security Breaches

Meta AI Instagram Account Takeover: 20,225 Accounts Hijacked via AI Support Chatbot

In a significant breach during late May and early June 2026, attackers leveraged a design flaw in Meta’s AI-powered support chatbot to commandeer over 20,000 Instagram accounts. By merely interacting with the chatbot, attackers could reset passwords and change email addresses, effectively locking out legitimate users without any form of identity verification or human oversight. This incident underscores the critical need for robust identity verification mechanisms in AI-driven support systems, emphasizing that even advanced AI solutions require comprehensive controls to prevent unauthorized actions.

­

💬 NHI & AI Identity Forum

Our suggested reading for this week from our forum — with over 10,000 articles about NHIs, including Agentic AI.

AI agent runtime governance: are tool calls actually controlled? — ConductorOne
On-call access management and the standing privilege problem — Opal Security
Mastering DORA Compliance for IT Resilience in EU Organizations — Arcon
AI agent privilege spectrum: what IAM teams need to govern — Saviynt
Identity governance complexity: what IAM teams need to fix now — Nexis
Inside the 48-Hour Supply Chain Attack Spree Across npm, PyPI, and Docker Hub — GitGuardian
Kubernetes for agentic AI: what identity teams should change — Teleport
AI agent governance and NHI observability: what teams should change — Clarity Security
AI agent intent is not a control, so what should teams enforce? — Unosecur
AI agent identity breaches: what standing credentials miss — Akeyless
Agent sandbox escape: what happens when identity controls fail too? — P0 Security
Vulnerability management at machine speed: are your controls keeping up? — Commvault
Retail and hospitality authentication: what IAM teams keep missing — Scramble ID
Modern authorization: is your access model keeping up? — PlainID
­

🏴 Latest Industry Announcements

ConductorOne — AI agents, humans, and NHIs: what does governed remediation change?
Saviynt — AI identity security: are your controls ready for agents and NHI?
Akeyless — AI agent access in Claude Enterprise: what changes for IAM teams?
Opal Security — Opal’s MCP servers: what changes for IAM teams and AI agents?
P0 Security — Agentic workforce access controls: are your runtime policies keeping up?
Linx Security — Microsoft Security Store partner ecosystem: what changes for IAM teams?
Commvault — AI studio governance for resilience workflows: what teams need to know
PlainID — BigQuery row and column controls: what IAM teams need now
­

📅 Upcoming Events & Webinars

Webinar

Developer endpoint secrets on November 18, 2026: what changes now?

By GitGuardian

Conference

SecureWorld Atlanta 2026: what runtime authorization means for NHIs

By P0 Security

Webinar

Phishing at scale for mid-market firms: what changes for defence?

By Abnormal AI

Conference

Agentic ecosystem security gaps: are identity controls keeping up?

By Vorlon

Webinar

Autonomous identity onboarding on Jul 30: what changes for access policy?

By Lumos

Webinar

Secrets sprawl: what IAM teams are missing in credential control

By 1Password

Webinar

Trust infrastructure on February 23, 2027: what IAM teams need now

By Keyfactor

 
­

🎓 Training & Certification

Our CPD Certified NHI Foundation Level course delivers practical guidance on governing, managing, and securing NHIs, including AI agents. Developed by Mr NHI, it’s designed for beginners, security professionals, and IT leaders, with hundreds of learners and an average 5-star rating.

Enrol here

­

📅 Are you planning a NHI Program in 2026 including Agentic AI?

As the premier authority on Non-Human Identities, with over 20 years of hands-on experience managing $10M–$20M+ global NHI programs, we offer independent guidance and advice tailored to your needs. Our expertise spans risk and maturity assessments, program initiation and hands-on execution, ensuring your organisation stays ahead of evolving threats and maximises risk reduction. Book below for a free initial consultation.

Book here

­

Lalit Choda
Founder of the NHI Mgmt Group

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.