Join our Newsletter — 33% off our NHI Course

The Non-Human & AI Identity Journal – Edition 66

Welcome to the latest edition of our Non-Human & AI Identity Journal, where we cover:

• The NHI & AI Summit – The New NHI Risk Reality
• Our pick from our Non-Human & AI Identity Forum
• Recent Breaches and Security Incidents
• Upcoming Events, Webinars, Industry Announcements
­

🎙 NHI Mgmt Group At Identiverse

NHI Summit Session: The New NHI Risk Reality

NHI Summit Session: The New NHI Risk Reality

At the NHI & AI Identity Summit at Identiverse 2026, industry leaders Shriram Santhanan, Andrej Safundzic, Don D’Souza, and Ashay Raut delve into the transformative impact of AI agents on the Non-Human Identity (NHI) risk landscape. As AI agents begin making decisions and acting on behalf of humans, traditional identity governance and security models face unprecedented challenges. Key themes include managing AI agent identity, accountability, and the critical need for context-aware authorisation. The session explores emerging standards and practices essential for preparing identity teams for the era of autonomous AI.

Watch the session here. Catch up on all sessions from the NHI Summit here and join the conversation shaping the future of NHI security.

­

🚨 Recent NHI & Identity Security Breaches

Storm-2949: How a Phone Call Turned One Cloud Identity into a Full Azure Breach

In May 2026, Microsoft Threat Intelligence exposed a sophisticated breach by Storm-2949, which exploited a single compromised cloud identity to infiltrate an entire Azure environment. Through social engineering, attackers gained persistent access to Microsoft Entra ID by manipulating Self-Service Password Reset (SSPR) and MFA processes, eventually accessing sensitive data across Microsoft 365 and Azure infrastructure. This breach underscores the importance for security professionals to scrutinize identity verification processes, as the misuse of legitimate credentials can lead to extensive data exposure without the need for malware or zero-day exploits.

­

💬 NHI & AI Identity Forum

Our suggested reading for this week from our forum — with over 10,000+ articles about NHIs, including Agentic AI.

Not All Just-in-Time Access Is Created Equal: Why JIT Architecture Matters — Akeyless
The Most Important AI Meeting You’ll Have This Quarter Costs Nothing — C1.ai
From MCP Tool Filtering to Runtime Access Control — P0 Security
AI for Access Administration: Why Expainability Decides Wether It Works — Nexis
AI Agents Need Three Gateways. Most Enterprises Only Have One. — Saviynt
The Future Of GitHub Actions Security And What You Can Do Right Now — GitGuardian
Identity Security and the AI Adoption Maturity Curve — Opal Security
What ISACA GRC 2026 Made Clear About the Future of Governance, Risk, & Compliance — Clarity Security
How to Prevent RBAC Role Explosion with Nested Access Lists — Teleport
Identity threat detection in 2026: Why 5-minute MTTD is now the benchmark — Unosecur
How a European Bank Reduced Insider Risk by 90% with Centralized Privileged Access Control — Arcon
The Connector Treadmill: Why Integration Never Ends — Opnova
Your Identity Management Must Have an Adaptive Security Spine — Newcore
The OpenAI & Hugging Face breach: the hidden risk of standing non-human privilege — Oleria Security
47-Day Countdown: Why Machine Identity Is Critical Now — Thryam
Shadow AI Agents: How to Find the Agents Nobody Registered — Scramble ID
AD Group Risks: Hidden Dangers in Backup Operators — Semperis
­

🏴 Latest Industry Announcements

Teleport — Cisco and Teleport Strategic Partnership – Bringing Infrastructure Identity to Agentic IT
Opal Security — New in Opal: Paladin, Access Campaigns, and OpalScript hit GA
C1.ai — Introducing Agentic Vault: govern every secret like an identity
Saviynt — Introducing Zuma: The Enterprise AI Identity Security Platform
Venice.io — Venice integrates with the Claude Compliance API to bring every Claude identity under just-in-time access
Oleria Security — Oleria and Happiest Minds partner to accelerate modern identity governance for AI-first enterprises
Descope — The Descope MCP Server Is Available On Claude and ChatGPT
Linx Security — Announces Integration with Snowflake to Solve the Trust Gap in Agentic AI
­

📅 Upcoming Events & Webinars

Conference

Join GitGuardian at OWASP AppSec Days France 2026

24 Sep 2026

By GitGuardian

Webinar

All Authorization Models Are Beautiful – When They Fit Their Purpose

29 Sep 2026

By Nexis

Conference

SecureWorld Atlanta, GA

24 Sep 2026

By P0 Security

Webinar

Live Webinar EMEA – What’s new? The 1Password quarterly security spotlight and roadmap review

3 Sep 2026

By 1Password

Webinar

How to Secure Entra ID Workload Identities—Before AI Agent Sprawl Catches Up

8 Sep 2026

By Semperis

Webinar

The Biggest Security Challenge Isn’t AI or Quantum—It’s Trust

23 Feb 2027

By Keyfactor

­

🎓 Training & Certification

Our CPD Certified NHI Foundation Level course delivers practical guidance on governing, managing, and securing NHIs, including AI agents. Developed by Mr NHI, it’s designed for beginners, security professionals, and IT leaders, with hundreds of learners and an average 5-star rating.

Enrol here

­

📅 Are you planning a NHI Program in 2026 including Agentic AI?

As the premier authority on Non-Human Identities, with over 20 years of hands-on experience managing $10M–$20M+ global NHI programs, we offer independent guidance and advice tailored to your needs. Our expertise spans risk and maturity assessments, program initiation and hands-on execution, ensuring your organisation stays ahead of evolving threats and maximises risk reduction. Book below for a free initial consultation.

Book here

­

Lalit Choda
Founder of the NHI Mgmt Group

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.