🎧 Spotify
In this Identiverse 2026 keynote, Lalit Choda — founder of the Non-Human Identity Management Group (NHIMG) — explains why non-human identities (NHIs) and autonomous AI agents have become the most dangerous insider threat in cybersecurity today.
Drawing on 30 years running IAM, PAM and NHI programmes in global banking, Lalit shares three real incidents where the intent was harmless, but the damage was huge:
🔹 One misused database credential that spiralled into a 100,000-credential clean-up
🔹 An AI coding assistant that wiped 60% of his data from a single line of SQL
🔹 An AI agent that deleted an entire company’s database — and its backups — in seconds
His message is blunt: as agentic AI spreads, agents reach systems you never intended and inherit the full blast radius of whatever credential they run under. System prompts were never security controls. Traditional insider threat models are now obsolete — and every agent is a non-human identity that must be governed, monitored and audited.
If you work in identity security, IAM or agentic AI, this one’s essential viewing.
