NHI & AI Identity Journal

The Non-Human & AI Identity Journal

Weekly intelligence for NHI, IAM, Agentic AI and Cyber practitioners — research, breach analysis, podcast episodes, forum picks, and industry events.

Subscribe to our newsletter and get 33% off our NHI Foundation Level Course.

All Editions

06 Nov 2026
The Non-Human & AI Identity Journal – Edition 76
🎙 PodcastOur new "Know Your Agent (KYA)" Guide…

🔐 BreachBinance Hack 2026: How A Compromised DevOps Laptop Led To $6.3 Billion In Unauthorised Withdrawals
💬
Forum
- Beyond PAM: How ARCON EPM Closes The Endpoint Access Gap
- Ambient Security
- Governing The Identities That Outnumber Your People
📢
Announcements
- FREE NHI & AI Governance Maturity Assessment
- This Week's Big Moves
Read this edition →
30 Oct 2026
The Non-Human & AI Identity Journal – Edition 75
🏢 NHI Mgmt GroupAgent.ID Conference – Opal Security

🔐 BreachAn attacker accessed Railway's systems, using stolen CI environment credentials to decrypt customer environment variables, potentially compromising AI provider
💬
Forum
- Clarity Security
- Automating User Access Reviews To Reduce Manual Work
- Truffle Security
📢
Announcements
- FREE NHI & AI Governance Maturity Assessment
- This Week's Big Moves
Read this edition →
22 Oct 2026
The Non-Human & AI Identity Journal – Edition 74
🏢 NHI Mgmt GroupAgentic IAM Day 2026

🔐 BreachOur Top 10 Agentic AI Identity Issues Guide
💬
Forum
- Why Credentials Are AI's Most Dangerous Vulnerability
- Advancing Identity And Access Management At Nexis
- Ambient Security
📢
Announcements
- This Week's Big Moves
- Integrates With AWS IAM Account Access Manager
Read this edition →
16 Oct 2026
The Non-Human & AI Identity Journal – Edition 73
🔐 BreachOur Top 10 Agentic AI Identity Issues Guide
💬
Forum
- EU AI Act Compliance: Mapping Identity Security Controls
- AI For Access Administration: Why Explainability Decides Whether It Works
- Non-Human Identity Security: Governing The Identities That Outnumber Your People
📢
Announcements
- This Week's Big Moves
- C1 To Join Workday
Read this edition →
08 Oct 2026
The Non-Human & AI Identity Journal – Edition 71
🎙 PodcastEp # 15 - Identity is the 3rd Generation of Security…

🔐 BreachOpenAI Agents and US Government Websites 2026: How Rogue AI Agents Used Leaked Census API Keys and Probed Federal Sites
💬
Forum
- The Privilege Spectrum: Why 'Privileged or Not' Is the Wrong Security Question
- How to Eliminate Shared Production Kubeconfigs
- 47-Day Certificates: What Changes and How to Prepare
📢
Announcements
- This week's big moves
- Introducing C1 AppHub: connect AI-built apps to the controls they need
Read this edition →
02 Oct 2026
The Non-Human & AI Identity Journal – Edition 72
🔐 BreachGhostAction Returns 2026: How Stolen GitHub Credentials Planted Secret-Stealing Workflows In 772 Repositories
💬
Forum
- Controlling Agent Access Beyond MCP Gateways
- — P0 Security
- DevSecOps Whitepaper: Implementing Security-By
📢
Announcements
- This Week's Big Moves
- Go Beyond Who Gets In: PlainID Launches A New Brand For The AI Era
Read this edition →
23 Sep 2026
The Non-Human & AI Identity Journal – Edition 70
🏢 NHI Mgmt GroupC1 Transform Conference (2026-10-06) — San Francisco

🔐 BreachKlue OAuth Supply Chain Breach: How Stolen SaaS Credentials Hit 700+ Organisations
💬
Forum
- Managed Identities: A Practical Guide to Eliminating Secrets
- IVIP in 2026: Why Visibility Alone Is No Longer Enough
📢
Announcements
- This week's big moves
- Introducing Opal Zero: Q&A with CPO Sameer Mehta
Read this edition →
16 Sep 2026
The Non-Human & AI Identity Journal – Edition 69
🏢 NHI Mgmt GroupAgentic IAM Day 2026 (2026-10-28) — Virtual
💬
Forum
- The Rising Sophistication of Endpoint Security Threat Patterns: Why CISOs Must Rethink Privilege Control
- Documented Is Not Proven: The Case for Continuous Compliance Monitoring
- How Privileged Can Your AI Become? More Than You Might Think
📢
Announcements
- Is now available in Europe
- The Hidden Credential Risk in Developer Workstations
Read this edition →
09 Sep 2026
The Non-Human & AI Identity Journal – Edition 68
🔐 BreachMcKinsey AI Platform Hack: A security Flaw Exposed 46M Chats and Sensitive Data
💬
Forum
- Agent provenance is ambitious, so let’s get the hard parts right
- — P0 Security
- What Is Endpoint Privilege Management – and How Is It Different from PAM?
📢
Announcements
- 🎙 NHI Mgmt Group At Identiverse
- NHI Summit Session: The Next 24 Months
Read this edition →
02 Sep 2026
The Non-Human & AI Identity Journal – Edition 67
🔐 BreachCanvas/Instructure Data Breach: ShinyHunters Exploits LMS Platform to Expose Millions of Student Records
💬
Forum
- From MCP Tool Filtering to Runtime Access Control
- — P0 Security
- Securing Coding Agents Across Your Team
📢
Announcements
- 🎙 NHI Mgmt Group At Identiverse
- NHI Summit Session: Secure By Design
Read this edition →
27 Aug 2026
The Non-Human & AI Identity Journal – Edition 66
💬
Forum
- Not All Just-in-Time Access Is Created Equal: Why JIT Architecture Matters
- The Most Important AI Meeting You’ll Have This Quarter Costs Nothing
- From MCP Tool Filtering to Runtime Access Control
📢
Announcements
- 🎙 NHI Mgmt Group At Identiverse
- NHI Summit Session: The New NHI Risk Reality
Read this edition →
19 Aug 2026
The Non-Human & AI Identity Journal – Edition 65
🔐 BreachMiasma and Hades: Self-Propagating Supply Chain Worms Hit npm, PyPI and Azure
💬
Forum
- Zero Trust Depends on the Access Beneath It
- The Three Stages of Identity Security Maturity and Why Most Programs Were Built for the Wrong Problem
- Every AI Agent Is an Identity. Are You Governing Them?
📢
Announcements
- 🎙 NHI Mgmt Group At Identiverse
- Opening Remarks: The Non-Human and AI Identity Summit IDV 2026
Read this edition →
12 Aug 2026
The Non-Human & AI Identity Journal – Edition 64
🎙 PodcastRecorded at Black Hat this week, Mr NHI puts two security leaders in the Hot Seat for a rapid-fire round on Identity Security.

🔐 BreachGravity SMTP CVE-2026-4020: A Single HTTP Request Exposed API Keys Across 100,000 WordPress Sites
💬
Forum
- Agentic runtime authorisation: what IAM teams need to govern now
- — P0 Security
- IAM hygiene and recertification backlogs: what teams need to fix
📢
Announcements
- AI agent identity risk is outpacing manual review controls
- OpenAI Codex and secretless access: what IAM teams need to know
Read this edition →
31 Jul 2026
The Non-Human & AI Identity Journal – Edition 63
🎙 PodcastIdentity, NHI & Agentic related Acquisitions…

🔐 BreachMeta AI Instagram Account Takeover: 20,225 Accounts Hijacked via AI Support Chatbot
💬
Forum
- AI agent runtime governance: are tool calls actually controlled?
- On-call access management and the standing privilege problem
- Mastering DORA Compliance for IT Resilience in EU Organizations
📢
Announcements
- AI agents, humans, and NHIs: what does governed remediation change?
- AI identity security: are your controls ready for agents and NHI?
Read this edition →
24 Jul 2026
The Non-Human & AI Identity Journal – Edition 62
🎙 PodcastEve Maler is in the hot seat this week! As President and Founder of Venn Factory, she tackles 10 rapid-fire questions on the complexities of NHI risk and agentic AI governance.

🔐 BreachJetBrains Marketplace AI Plugin Campaign: 15 Malicious Plugins Steal AI API Keys from 70,000 Developers
💬
Forum
- GitLost and shadow agents: what IAM teams need to fix now
- Identity visibility and intelligence platforms: what IAM teams need to know
- Privileged access management: are your controls keeping up?
📢
Announcements
- Agentic workforce access controls: are your runtime policies keeping up?
- Workload identity and multi-vault governance: what changes now?
Read this edition →
08 Jul 2026
The Non-Human & AI Identity Journal – Edition 61
🏢 NHI Mgmt GroupLive Webinar – Beyond Human: NHI & AI Identity (2026-07-09) — Virtual

🎙 PodcastJoin Eve Maler, President of Venn Factory, as she delves into the critical issue of identity security in the agentic AI era.

🔐 BreachCoupang Signing Key Breach: Unrevoked Credentials Expose 33.7 Million Records After Employee Offboarding
💬
Forum
- Secrets and NHI convergence: what it means for IAM teams
- Automating User Lifecycle Management (JML): How JML Strengthen Identity Security & Compliance
- SOC 2 automation and the governance gap IAM teams miss
📢
Announcements
- AI agent identity risk and runtime access control: what changes now?
- AI agent dashboards: what visibility do IAM teams actually need?
Read this edition →
25 Jun 2026
The Non-Human & AI Identity Journal – Edition 60
🏢 NHI Mgmt GroupCSA Keynote – Humans & Now Agents: The NHI Internal Threat Amplified (2026-06-24) — Virtual

🎙 PodcastDavid Lee is in the hot seat this week! As Field CTO at Saviynt, he tackles 10 rapid-fire questions on identity risks that enterprises can no longer ignore.

🔐 BreachKlue OAuth Supply Chain Breach: How Stolen SaaS Credentials Hit 700+ Organisations
💬
Forum
- Identity Governance and AI Security: Why Identity Governance Is the First Step to Safe AI Adoption
- FedRAMP 20x KSI-IAM: why identity evidence now matters more
- 2025 Cybersecurity Shift: Attackers Target Access, Not Apps
📢
Announcements
- Clarity Security
- Clarity Aperture and adaptive trust: what changes for IAM teams?
Read this edition →
11 Jun 2026
The Non-Human & AI Identity Journal – Edition 59
🏢 NHI Mgmt GroupIdentiverse 2026 – Non-Human & AI Identity Summit & Pavilion (2026-06-15) — Mandalay Bay, Las Vegas

🎙 PodcastEp # 12 – When AI Agents Inherit Risk: The NHI Problem Expands…

🔐 BreachUnlocking Claude Code: Monitor Your AI Agents’ True Actions
💬
Forum
- Streamline User Access Reviews: Automate IAM Tasks Efficiently
- When Did “Access” Shift from Login to Authorization? Insights Explained
- — P0 Security
📢
Announcements
- Akeyless password manager and workforce identity control: what changes?
- Identity-centric PAM for NHIs and AI agents: what changes now?
Read this edition →
05 Jun 2026
The Non-Human & AI Identity Journal – Edition 58
🏢 NHI Mgmt GroupIdentiverse 2026 – Non-Human & AI Identity Summit & Pavilion (2026-06-15) — Mandalay Bay, Las Vegas

🎙 PodcastEp #11 – Securing AI Agents In Runtime…

🔐 BreachInside the Shai-Hulud Campaign: npm Malware Attack Exposes Secrets on GitHub
💬
Forum
- Multi-site auditability gaps: are your logs enough for compliance?
- AI agent visibility and the governance gap teams are missing
- 900K Users Affected by Malicious AI Chrome Extensions
📢
Announcements
- How should teams govern Databricks AI agents before access sprawl grows?
- How should APJ teams treat identity as a strategic control plane?
Read this edition →
28 May 2026
The Non-Human & AI Identity Journal – Edition 57
🏢 NHI Mgmt GroupIdentiverse 2026 – Non-Human & AI Identity Summit & Pavilion (2026-06-15) — Mandalay Bay, Las Vegas

🎙 PodcastEleanor Meritt is in the hot seat this week! As President of Arcon, she tackles 10 machine-speed questions on identity management and security with a focus on Non-Human & Agentic AI identity.

🔐 BreachMassive Docker Hub Leak: 10,000+ Images Expose Secrets and Auth Keys
💬
Forum
- Understanding AI Agents: Navigating Security Risks Today
- Identity security and AI agents: is your defense model ready?
- Understanding OAuth Scopes for Secure MCP Authorization
📢
Announcements
- AI agent identity governance: are your controls keeping up?
- Zero standing privilege for AI agents: are your controls ready?
Read this edition →

Subscribe — free, every week

All Editions

Deepen Your Knowledge