Join our Newsletter — 33% off our NHI Course

The Non-Human & AI Identity Journal – Edition 57

Welcome to the latest edition of our Non-Human & AI Identity Journal, where we cover:

• What is the NHI Mgmt Group up to?
• The Non-Human & AI Identity Podcast
• Our pick from our Non-Human & AI Identity Forum
• Recent Breaches and Security Incidents
• Upcoming Events, Webinars, Industry Announcements
• NHI Foundation Level Course
• Planning an NHI Program in 2026
­

⭐ What’s Happening at the NHI Mgmt Group

Identiverse 2026 – Non-Human & AI Identity Summit & Pavilion (2026-06-15) — Mandalay Bay, Las Vegas

Just over 2 weeks to go to the biggest Non-Human & Agentic AI Identity Summit, taking place on June 15, 2026, at Mandalay Bay, Las Vegas that our NHI Mgmt Group is hosting. A half day event covering 8 sessions and 24 thought leaders across the industry. This event is a must-attend for those eager to stay at the forefront of innovation and security in the rapidly evolving landscape of AI identity.

­

🎙 The Non-Human & AI Identity Podcast

Mr. NHI’s Human Identity in the Hot Seat

Eleanor Meritt is in the hot seat this week! As President of Arcon, she tackles 10 machine-speed questions on identity management and security with a focus on Non-Human & Agentic AI identity. Eleanor delves into whether AI agents should be treated like employees, the criticality of IAM for AI, and the ownership quandary of breached machine identities. Her insights reveal the urgent need for redefining security strategies as AI agents challenge traditional governance. Watch the episode here.

Catch up on previous episodes here and join the conversation shaping the future of NHI security.

­

🚨 Recent NHI & Identity Security Breaches

Massive Docker Hub Leak: 10,000+ Images Expose Secrets and Auth Keys

A comprehensive analysis by Flare revealed that over 10,000 Docker Hub container images contained exposed secrets such as access tokens, API keys, and cloud credentials. These credentials were often included due to careless development practices and lack of secret sanitization, posing significant risks of unauthorized access to cloud platforms and corporate infrastructure. The breach underscores the critical importance for security professionals to enforce stringent controls over machine identities and ensure secrets are never embedded in publicly accessible artifacts, emphasizing the need for robust secret management and regular credential rotation.

­

💬 NHI & AI Identity Forum

Our suggested reading for this week from our forum — with over 2,700 articles about NHIs, including Agentic AI.

Understanding AI Agents: Navigating Security Risks Today — Astrix Security
Identity security and AI agents: is your defense model ready? — Saviynt
Understanding OAuth Scopes for Secure MCP Authorization — P0 Security
How should teams adapt NIST CSF 2.0 for AI agents? — Teleport
Unlocking Claude Code: Monitor Your AI Agents’ True Actions — Entro Security
When does identity security become a business programme problem? — SailPoint
Understanding Short-Lived Credentials in Agentic Systems — GitGuardian
Understanding the Vercel Breach: Why Ephemeral Secrets Matter — Akeyless
Top 5 IAM Trends Transforming Security in 2026 You Can’t Miss — Clarity Security
Understanding Major Breaches: Cisco and EU’s Shared Vulnerability — Unosecur
Mastering Least Privilege for Non-Human Identities in Cloud Systems — Token Security
OT privileged access controls: how do teams reduce risk without downtime? — Delinea
How should teams govern Kubernetes RBAC when NHI sprawl grows? — StrongDM
­

🏴 Latest Industry Announcements

Saviynt — AI agent identity governance: are your controls keeping up?
SailPoint — Zero standing privilege for AI agents: are your controls ready?
Unosecur — On-prem identity gaps: what IAM teams need to fix now
Astrix Security — New AI Security Guides from CIS, Astrix, and Cequence Revealed
Akeyless — Akeyless Achieves FIPS 140-3 Validation: Why It Matters for Cybersecurity
Descope — How should teams govern AI agent identities in MCP workflows?
Grip Security — Unlocking AI + SaaS Security: Grip Security + Cyera’s Identity Integration
Cyera — Unlocking Control: Cyera’s Agent Graph for Securing AI Agents
CrowdStrike — CrowdStrike Launches Project QuiltWorks to Tackle AI-Driven Cybersecurity Risks
Ping Identity — Secure Agent Traffic with Ping Identity’s Google Cloud Gateway
­

📅 Upcoming Events & Webinars

Conference

How should teams govern AI agents, secrets, and machine identity in Paris?

By GitGuardian

Conference

IdentityTV 2026 or Developer Days 2026: which path fits your team?

By SailPoint

Webinar

Live insights briefing: AI agent identity risk – June 4

By Akeyless

Webinar

Dynamics 365 access governance: are your controls keeping up?

By Delinea

Webinar

Governance in motion lab on June 9: what changes for IAM and GRC?

By Pathlock

Webinar

How should teams govern non-human identities as AI agents scale?

By Omada Identity

­

🎓 Training & Certification

Our CPD Certified NHI Foundation Level course delivers practical guidance on governing, managing, and securing NHIs, including AI agents. Developed by Mr NHI, it’s designed for beginners, security professionals, and IT leaders, with hundreds of learners and an average 5-star rating.

Enrol here

­

📅 Are you planning a NHI Program in 2026 including Agentic AI?

As the premier authority on Non-Human Identities, with over 20 years of hands-on experience managing $10M–$20M+ global NHI programs, we offer independent guidance and advice tailored to your needs. Our expertise spans risk and maturity assessments, program initiation and hands-on execution, ensuring your organisation stays ahead of evolving threats and maximises risk reduction. Book below for a free initial consultation.

Book here

­

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.