Join our Newsletter — 33% off our NHI Course

The Non-Human & AI Identity Journal – Edition 62

Welcome to the latest edition of our Non-Human & AI Identity Journal, where we cover:

• The Non-Human & AI Identity Podcast
• Our pick from our Non-Human & AI Identity Forum
• Recent Breaches and Security Incidents
• Upcoming Events, Webinars, Industry Announcements
­

🎙 The Non-Human & AI Identity Podcast

Eve Maler is in the hot seat this week! As President and Founder of Venn Factory, she tackles 10 rapid-fire questions on the complexities of NHI risk and agentic AI governance. Eve shares insights on the industry’s struggle to manage static credentials and the looming accountability gap in AI deployment. Her expertise challenges us to rethink how identity lines are drawn in this evolving landscape. Watch the episode here.

Catch up on previous episodes here and join the conversation shaping the future of NHI security.

­

🚨 Recent NHI & Identity Security Breaches

JetBrains Marketplace AI Plugin Campaign: 15 Malicious Plugins Steal AI API Keys from 70,000 Developers

Between October 2025 and June 2026, attackers infiltrated the JetBrains Marketplace with 15 malicious plugins that masqueraded as legitimate AI coding tools, targeting nearly 70,000 developers. These plugins secretly captured and exfiltrated AI provider API keys—such as those from OpenAI and Anthropic—when developers entered them, turning the stolen credentials into a lucrative resale business. This breach highlights the importance of scrutinizing third-party plugins in developer environments, as traditional trust models may not adequately protect against sophisticated credential theft in the age of AI-driven tools.

­

💬 NHI & AI Identity Forum

Our suggested reading for this week from our forum — with over 13,500 articles about NHIs, including Agentic AI.

GitLost and shadow agents: what IAM teams need to fix now — Unosecur
Identity visibility and intelligence platforms: what IAM teams need to know — Nexis
Privileged access management: are your controls keeping up? — Opal Security
AI agent access after login: are your controls keeping up? — Akeyless
Streamline User Access Reviews: Automate IAM Tasks Efficiently — Clarity Security
SnowFROC 2026: Enhancing Security with Real Trust Solutions — GitGuardian
AI agent audit trails: what IAM teams need to prove now — Saviynt
Understanding OAuth Scopes for Secure MCP Authorization — P0 Security
EU Cyber Resilience Act identity controls: what changes for teams? — Teleport
Contact center authentication: is cryptographic proof replacing KBA? — Scramble ID
AI agent governance primitives: is your identity stack ready? — ConductorOne
Revolutionizing Identity Security: The Rise of Autonomous Solutions — Linx Security
­

🏴 Latest Industry Announcements

P0 Security — Agentic workforce access controls: are your runtime policies keeping up?
Akeyless — Workload identity and multi-vault governance: what changes now?
Saviynt — Saviynt’s identity platform and NHI governance: what changes for teams?
Unosecur — Office 365 identity sprawl: what IAM teams need to fix now
Opal Security — Access comparison for outlier access: is continuous review enough?
PlainID — Real-time authorization at sign-in: what changes for IAM teams?
ConductorOne — Private MCP servers and AI access governance: what changes now?
Token Security — AI agent permissions and least privilege: are controls keeping up?
Linx Security — AI-native IGA and autonomous identity governance: what changes now?
Nexis — Gartner peer data and IGA visibility in EMEA industries
­

📅 Upcoming Events & Webinars

Conference

SecureWorld Atlanta 2026: what runtime authorization means for NHIs

By P0 Security

Webinar

Every laptop is a credential store, so what should IAM teams do?

By GitGuardian

Webinar

AI agent and NHI governance gaps are widening: what now?

By Clarity Security

Webinar

Mythos-class AI attacks: what machine-speed parallelism changes

By Acalvio

Conference

API + AI Summit 2026: what it means for AI, APIs, and governance

By Kong

Webinar

AI token usage and governance gaps: what should teams do now?

By 1Password

­

🎓 Training & Certification

Our CPD Certified NHI Foundation Level course delivers practical guidance on governing, managing, and securing NHIs, including AI agents. Developed by Mr NHI, it’s designed for beginners, security professionals, and IT leaders, with hundreds of learners and an average 5-star rating.

Enrol here

­

📅 Are you planning a NHI Program in 2026 including Agentic AI?

As the premier authority on Non-Human Identities, with over 20 years of hands-on experience managing $10M–$20M+ global NHI programs, we offer independent guidance and advice tailored to your needs. Our expertise spans risk and maturity assessments, program initiation and hands-on execution, ensuring your organisation stays ahead of evolving threats and maximises risk reduction. Book below for a free initial consultation.

Book here

­

Lalit Choda
Founder of the NHI Mgmt Group

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.