Welcome to the latest edition of our Non-Human & AI Identity Journal where we cover:   

• The Non-Human & AI Identity Podcast 

• Our pick from our Non-Human & AI Identity Forum 

• Recent Breaches and Security Incidents 

• Upcoming Events, Webinars, Industry Announcements 

The Non-Human & AI Identity Podcast 

Eve Maler is in the hot seat this week! As President and Founder of Venn Factory, she tackles 10 rapid-fire questions on the complexities of NHI risk and agentic AI governance. Eve shares insights on the industry’s struggle to manage static credentials and the looming accountability gap in AI deployment. Her expertise challenges us to rethink how identity lines are drawn in this evolving landscape. Watch the episode here.

Catch up on previous episodes here and join the conversation shaping the future of NHI security. 

Recent NHI & Identity Security Breaches 

Notable breaches and security incidents highlighting the risks of unmanaged non-human identities and AI agents: 

JetBrains Marketplace AI Plugin Campaign: 15 Malicious Plugins Steal AI API Keys from 70,000 Developers 

Between October 2025 and June 2026, attackers infiltrated the JetBrains Marketplace with 15 malicious plugins that masqueraded as legitimate AI coding tools, targeting nearly 70,000 developers. These plugins secretly captured and exfiltrated AI provider API keys—such as those from OpenAI and Anthropic—when developers entered them, turning the stolen credentials into a lucrative resale business. This breach highlights the importance of scrutinizing third-party plugins in developer environments, as traditional trust models may not adequately protect against sophisticated credential theft in the age of AI-driven tools. 

Non-Human and AI Identity Forum Posts 

Our suggested reading for this week from our forum — with over 13,500 articles about NHIs, including Agentic AI. 

• GitLost and shadow agents: what IAM teams need to fix now — Unosecur 

• Identity visibility and intelligence platforms: what IAM teams need to know — Nexis 

• Privileged access management: are your controls keeping up? — Opal Security 

• AI agent access after login: are your controls keeping up? — Akeyless 

• Streamline User Access Reviews: Automate IAM Tasks Efficiently — Clarity Security 

• SnowFROC 2026: Enhancing Security with Real Trust Solutions — GitGuardian 

• AI agent audit trails: what IAM teams need to prove now — Saviynt 

• Understanding OAuth Scopes for Secure MCP Authorization — P0 Security 

• EU Cyber Resilience Act identity controls: what changes for teams? — Teleport 

• Contact center authentication: is cryptographic proof replacing KBA? — Scramble ID 

• AI agent governance primitives: is your identity stack ready? — ConductorOne 

• Revolutionizing Identity Security: The Rise of Autonomous Solutions — Linx Security 

Latest Industry Announcements 

Major updates shaping the NHI and identity security space this week: 

• P0 Security: Agentic workforce access controls: are your runtime policies keeping up? 

• Akeyless: Workload identity and multi-vault governance: what changes now? 

• Saviynt’s identity platform and NHI governance: what changes for teams? 

• Unosecur: Office 365 identity sprawl: what IAM teams need to fix now 

• Opal Security: Access comparison for outlier access: is continuous review enough? 

• PlainID: Real-time authorization at sign-in: what changes for IAM teams? 

• ConductorOne: Private MCP servers and AI access governance: what changes now? 

• Token Security: AI agent permissions and least privilege: are controls keeping up? 

• Linx Security: AI-native IGA and autonomous identity governance: what changes now? 

• Nexis: Gartner peer data and IGA visibility in EMEA industries 

Upcoming Events and Webinars 

To support your learning journey, here are key events happening across the industry. They feature experts discussing the latest challenges and innovations in identity security: 

• SecureWorld Atlanta 2026: what runtime authorization means for NHIs — by P0 Security 

• Every laptop is a credential store, so what should IAM teams do? — by GitGuardian 

• AI agent and NHI governance gaps are widening: what now? — by Clarity Security 

• Mythos-class AI attacks: what machine-speed parallelism changes — by Acalvio 

• API + AI Summit 2026: what it means for AI, APIs, and governance — by Kong 

• AI token usage and governance gaps: what should teams do now? — by 1Password 

The Most Comprehensive & Only CPD-Certified NHI Course 

Our CPD Certified NHI Foundation Level course delivers practical guidance on governing, managing, and securing NHIs, including AI agents. Developed by Mr NHI, it’s designed for beginners, security professionals, and IT leaders, with hundreds of learners and an average 5-star rating. 

Enroll here. 

Are you planning a NHI Program in 2026 including Agentic AI? 

As the premier authority on Non-Human Identities, with over 20 years of hands-on experience managing $10M–$20M+ global NHI programs, we offer independent guidance and advice tailored to your needs. Our expertise spans risk and maturity assessments, program initiation and hands-on execution, ensuring your organisation stays ahead of evolving threats and maximises risk reduction. 

Reach out here for a free initial consultation. 

Lalit Choda 

Founder of the NHI Mgmt Group