The Non-Human & AI Identity Journal – Edition 57

Welcome to the latest edition of our Non-Human & AI Identity Journal where we cover:  

• What is the NHI Mgmt Group up to? 

• The Non-Human & AI Identity Podcast 

• Our pick from our Non-Human & AI Identity Forum 

• Recent Breaches and Security Incidents 

• Upcoming Events, Webinars, Industry Announcements 

• NHI Foundation Level Course 

• Planning an NHI Program in 2026 

What’s Happening at the NHI Mgmt Group 

Identiverse 2026 – Non-Human & AI Identity Summit & Pavilion (2026-06-15) — Mandalay Bay, Las Vegas 

Just over 2 weeks to go to the biggest Non-Human & Agentic AI Identity Summit, taking place on June 15, 2026, at Mandalay Bay, Las Vegas that our NHI Mgmt Group is hosting. A half day event covering 8  sessions and 24 thought leaders across the industry. This event is a must-attend for those eager to stay at the forefront of innovation and security in the rapidly evolving landscape of AI identity.  

The Non-Human & AI Identity Podcast 

**Mr. NHI’s Human Identity in the Hot Seat** 

Eleanor Meritt is in the hot seat this week! As President of Arcon, she tackles 10 machine-speed questions on identity management and security with a focus on Non-Human & Agentic AI identity. Eleanor delves into whether AI agents should be treated like employees, the criticality of IAM for AI, and the ownership quandary of breached machine identities. Her insights reveal the urgent need for redefining security strategies as AI agents challenge traditional governance. Watch the episode here.

Catch up on previous episodes here and join the conversation shaping the future of NHI security. 

NHI & Identity Security Breaches 

Massive Docker Hub Leak: 10,000+ Images Expose Secrets and Auth Keys 

A comprehensive analysis by Flare revealed that over 10,000 Docker Hub container images contained exposed secrets such as access tokens, API keys, and cloud credentials. These credentials were often included due to careless development practices and lack of secret sanitization, posing significant risks of unauthorized access to cloud platforms and corporate infrastructure. The breach underscores the critical importance for security professionals to enforce stringent controls over machine identities and ensure secrets are never embedded in publicly accessible artifacts, emphasizing the need for robust secret management and regular credential rotation. 

Non-Human and AI Identity Forum Posts 

Our suggested reading for this week from our forum — with over 2,700 articles about NHIs, including Agentic AI. 

• Understanding AI Agents: Navigating Security Risks Today — Astrix Security 

• Identity security and AI agents: is your defense model ready? — Saviynt 

• Understanding OAuth Scopes for Secure MCP Authorization — P0 Security 

• How should teams adapt NIST CSF 2.0 for AI agents? — Teleport 

• Unlocking Claude Code: Monitor Your AI Agents’ True Actions — Entro Security 

• When does identity security become a business programme problem? — SailPoint 

• Understanding Short-Lived Credentials in Agentic Systems — GitGuardian 

• Understanding the Vercel Breach: Why Ephemeral Secrets Matter — Akeyless 

• Top 5 IAM Trends Transforming Security in 2026 You Can’t Miss — Clarity Security 

• Understanding Major Breaches: Cisco and EU’s Shared Vulnerability — Unosecur 

• Mastering Least Privilege for Non-Human Identities in Cloud Systems — Token Security 

• OT privileged access controls: how do teams reduce risk without downtime? — Delinea 

• How should teams govern Kubernetes RBAC when NHI sprawl grows? — StrongDM 

Latest Industry Announcements 

Major updates shaping the NHI and identity security space this week: 

• Saviynt: AI agent identity governance: are your controls keeping up? 

• SailPoint: Zero standing privilege for AI agents: are your controls ready? 

• Unosecur: On-prem identity gaps: what IAM teams need to fix now 

• Astrix Security: New AI Security Guides from CIS, Astrix, and Cequence Revealed 

• Akeyless Achieves FIPS 140-3 Validation: Why It Matters for Cybersecurity 

• Descope: How should teams govern AI agent identities in MCP workflows? 

• Unlocking AI + SaaS Security: Grip Security + Cyera’s Identity Integration 

• Unlocking Control: Cyera’s Agent Graph for Securing AI Agents 

• CrowdStrike Launches Project QuiltWorks to Tackle AI-Driven Cybersecurity Risks 

• Secure Agent Traffic with Ping Identity’s Google Cloud Gateway 

Upcoming Events and Webinars 

To support your learning journey, here are key events happening across the industry. They feature experts discussing the latest challenges and innovations in identity security: 

• How should teams govern AI agents, secrets, and machine identity in Paris? — by GitGuardian 

• IdentityTV 2026 or Developer Days 2026: which path fits your team? — by SailPoint 

• Live insights briefing: AI agent identity risk – June 4 — by Akeyless 

• Dynamics 365 access governance: are your controls keeping up? — by Delinea 

• Governance in motion lab on June 9: what changes for IAM and GRC? — by Pathlock 

• How should teams govern non-human identities as AI agents scale? — by Omada Identity 

The Most Comprehensive & Only CPD-Certified NHI Course 

Our CPD Certified NHI Foundation Level course delivers practical guidance on governing, managing, and securing NHIs, including AI agents. Developed by Mr NHI, it’s designed for beginners, security professionals, and IT leaders, with hundreds of learners and an average 5-star rating. 

Enroll here 

Are you planning a NHI Program in 2026 including Agentic AI? 

As the premier authority on Non-Human Identities, with over 20 years of hands-on experience managing $10M–$20M+ global NHI programs, we offer independent guidance and advice tailored to your needs. Our expertise spans risk and maturity assessments, program initiation and hands-on execution, ensuring your organisation stays ahead of evolving threats and maximises risk reduction. Reach out here for a free initial consultation.