Welcome to the latest edition of our Non-Human & AI Identity Journal where we cover:   

• Mr. NHI’s Keynote at Identiverse & CSA Agentic AI Summit 
• Major acquisitions in NHI, Identity & ITDR space & Agentic releases
• Our pick from our Non-Human & AI Identity Forum 
• Recent Breaches and Security Incidents 
• Upcoming Events, Webinars, Industry Announcements 

What’s Happening at the NHI Mgmt Group 

KeyNote – Humans and now Agents: The NHI Internal Threat Amplified 

I recently gave a keynote at Identiverse and CSA’s Agentic AI Summit, where I talk about how AI agents are fundamentally changing the insider threat model, why traditional security assumptions are becoming obsolete, and why some of the most significant security risks may come from amplified capability misuse and accidents inside organizations rather than external attackers. Watch the episode here. 

Catch up on our Non-Human & AI Identity Podcast here and join the conversation shaping the future of NHI security. 

Identity, NHI & Agentic related Acquisitions  

Our LI post on the identity landscape experiencing a massive platform consolidation, went viral. Major security networks, cloud frameworks, and identity providers are aggressively absorbing specialized non-human identity (NHI) and identity threat detection (ITDR) start-ups.  

• The article shares 10 recent acquisitions as well as 5 major product announcements around enterprise AI security capabilities. 

Recent NHI & Identity Security Breaches 

Meta AI Instagram Account Takeover: 20,225 Accounts Hijacked via AI Support Chatbot 

In a significant breach during late May and early June 2026, attackers leveraged a design flaw in Meta’s AI-powered support chatbot to commandeer over 20,000 Instagram accounts. By merely interacting with the chatbot, attackers could reset passwords and change email addresses, effectively locking out legitimate users without any form of identity verification or human oversight. This incident underscores the critical need for robust identity verification mechanisms in AI-driven support systems, emphasizing that even advanced AI solutions require comprehensive controls to prevent unauthorized actions. 

Non-Human and AI Identity Forum Posts 

Our suggested reading for this week from our forum — with over 10,000 articles about NHIs, including Agentic AI. 

• AI agent runtime governance: are tool calls actually controlled? — ConductorOne 

• On-call access management and the standing privilege problem — Opal Security 

• Mastering DORA Compliance for IT Resilience in EU Organizations — Arcon 

• AI agent privilege spectrum: what IAM teams need to govern — Saviynt 

• Identity governance complexity: what IAM teams need to fix now — Nexis 

• Inside the 48-Hour Supply Chain Attack Spree Across npm, PyPI, and Docker Hub — GitGuardian 

• Kubernetes for agentic AI: what identity teams should change — Teleport 

• AI agent governance and NHI observability: what teams should change — Clarity Security 

• AI agent intent is not a control, so what should teams enforce? — Unosecur 

• AI agent identity breaches: what standing credentials miss — Akeyless 

• Agent sandbox escape: what happens when identity controls fail too? — P0 Security 

• Vulnerability management at machine speed: are your controls keeping up? — Commvault 

• Retail and hospitality authentication: what IAM teams keep missing — Scramble ID 

• Modern authorization: is your access model keeping up? — PlainID 

Latest Industry Announcements 

Major updates shaping the NHI and identity security space this week: 

• ConductorOne: AI agents, humans, and NHIs: what does governed remediation change? 

• Saviynt: AI identity security: are your controls ready for agents and NHI? 

• Akeyless: AI agent access in Claude Enterprise: what changes for IAM teams? 

• Opal Security: Opal’s MCP servers: what changes for IAM teams and AI agents? 

• P0 Security: Agentic workforce access controls: are your runtime policies keeping up? 

• Linx Security: Microsoft Security Store partner ecosystem: what changes for IAM teams? 

• Commvault: AI studio governance for resilience workflows: what teams need to know 

• PlainID: BigQuery row and column controls: what IAM teams need now 

Upcoming Events and Webinars 

To support your learning journey, here are key events happening across the industry. They feature experts discussing the latest challenges and innovations in identity security: 

• Developer endpoint secrets on November 18, 2026: what changes now? — by GitGuardian 

• SecureWorld Atlanta 2026: what runtime authorization means for NHIs — by P0 Security 

• Phishing at scale for mid-market firms: what changes for defence? — by Abnormal AI 

• Agentic ecosystem security gaps: are identity controls keeping up? — by Vorlon 

• Autonomous identity onboarding on Jul 30: what changes for access policy? — by Lumos 

• Secrets sprawl: what IAM teams are missing in credential control — by 1Password 

• Trust infrastructure on February 23, 2027: what IAM teams need now — by Keyfactor 

The Most Comprehensive & Only CPD-Certified NHI Course 

Our CPD Certified NHI Foundation Level course delivers practical guidance on governing, managing, and securing NHIs, including AI agents. Developed by Mr NHI, it’s designed for beginners, security professionals, and IT leaders, with hundreds of learners and an average 5-star rating. 

Enroll here. 

Are you planning a NHI Program in 2026 including Agentic AI? 

As the premier authority on Non-Human Identities, with over 20 years of hands-on experience managing $10M–$20M+ global NHI programs, we offer independent guidance and advice tailored to your needs. Our expertise spans risk and maturity assessments, program initiation and hands-on execution, ensuring your organisation stays ahead of evolving threats and maximises risk reduction. 

Reach out here for a free initial consultation. 

Lalit Choda 

Founder of the NHI Mgmt Group