Join our Newsletter — 33% off our NHI Course

The Non-Human & AI Identity Journal – Edition 72

Welcome to the latest edition of our Non-Human & AI Identity Journal, where we cover:

• New Practitioner Guides from the NHI Mgmt Group
• Our pick from our Non-Human & AI Identity Forum
• Recent Breaches and Security Incidents
• Upcoming Events, Webinars, Industry Announcements
­

📣 What’s Happening at the NHI Mgmt Group

Sharing key news and events from our NHI Mgmt Group.

Featured From NHI Mgmt Group

NHI & AI Risks & Challenges Report

Get ready to tackle the most pressing challenges in securing Non-Human Identities and AI Agents with our newly launched NHI & AI Risks & Challenges Report. Download it now to ensure your identity and security teams are ahead of the curve.

Get The Report

Featured Security Guide

Securing Enterprise AI Copilots And Assistants (AI Security)

The new “Securing Enterprise AI Copilots and Assistants” guide is out, providing crucial strategies to safeguard enterprise AI copilots by fixing over-sharing, labeling sensitive data, and governing connectors. Equip yourself with essential measures to secure NHIs and AI agents.

Read The Guide

­

🚨 Recent NHI & Identity Security Breaches

GhostAction Returns 2026: How Stolen GitHub Credentials Planted Secret-Stealing Workflows In 772 Repositories

Between 31 August and 30 September 2026, stolen GitHub credentials were used in the GhostAction campaign to inject secret-stealing workflows into 772 repositories. This highlights the necessity for security professionals to aggressively revoke compromised credentials to prevent ongoing access.

­

💬 NHI & AI Identity Forum

Our suggested reading for this week from our forum — with over 20,600 articles about NHIs, including Agentic AI.

Controlling Agent Access Beyond MCP Gateways — P0 Security
DevSecOps Whitepaper: Implementing Security-By-Design And Effective Vulnerability Management — GitGuardian
No App Left Ungoverned: How Saviynt Uses Claude To Accelerate Application Onboarding — Saviynt
Privileged Access Management: What It Is And How Modern PAM Is Different In 2027 — Venice.io
What Would You Do Monday? Here’s The Actual Answer. — C1.ai
GitHub Repos Exposed 543,699 Credentials. Nobody Revoked Them. — Truffle Security
The Identity Attack Surface: How To Measure And Shrink It — Ambient Security
How A European Bank Reduced Insider Risk By 90% With Centralized Privileged Access Control — Arcon
Governing Access To Real-Time Analytics: How Opal And ClickHouse Secure Your Data At Scale — Opal Security
How To Eliminate Static Secrets With Identity-Based Access — Akeyless
SSO-Backed Kubectl Access Across Many Clusters — Teleport
PlainID Mentioned In The 2026 Gartner® Innovation Insight Report On IVIP And IAM Augmentation Vendors Disrupting Light IGA — PlainID
Oracle Cloud Infrastructure Identity Security: What Is Inside Your OCI Tenancy And How To Secure It — Unosecur
From Guesswork To Confidence: Empowering HR To Deliver On The New Hire Experience — Clarity Security
Your AI Agents Already Have Access. Is Your Governance Keeping Up? — Nexis
The Governance Ceiling: Why API Coverage Was Never The Finish Line — Opnova
­

🏴 Latest Industry Announcements

This Week’s Big Moves

PlainID — Go Beyond Who Gets In: PlainID Launches A New Brand For The AI Era
C1.ai — C1 Introduces LLM Gateway To Bring Policy-Controlled Routing To Enterprise AI
Opal Security — Opal + Okta Cross App Access: Secure Agent Access To Opal MCP
Unosecur — Extends Identity Security To Oracle Cloud Infrastructure
GitGuardian — The Hidden Credential Risk In Developer Workstations
Akeyless — Announces General Availability Of Agentic Runtime Authority For Real-Time Intent-Based Access Control Of AI Agents
­

📅 Upcoming Events & Webinars

Webinar

Flexible Recertification Decisions

11 Nov 2026

By Nexis

Conference

Agentic IAM Day 2026

28 Oct 2026

By PlainID

Webinar

The 47-Day Certificate Era: Are Your Machine Identities Ready?

15 Oct 2026

By Akeyless

Webinar

Your Agent Reached The MCP Gateway. Now What?

15 Oct 2026

By P0 Security

­

🎓 Training & Certification

The Most Comprehensive & Only CPD-Certified NHI Course

Our CPD Certified NHI Foundation Level course delivers practical guidance on governing, managing, and securing NHIs, including AI agents. Developed by Mr NHI, it’s designed for beginners, security professionals, and IT leaders.
★★★★★ Hundreds of learners

Enrol Here

­

📅 Are You Planning A NHI Program In 2026 Including Agentic AI?

As the premier authority on Non-Human Identities, with over 20 years of hands-on experience managing $10M–$20M+ global NHI programs, we offer independent guidance and advice tailored to your needs. Our expertise spans risk and maturity assessments, program initiation and hands-on execution, ensuring your organisation stays ahead of evolving threats and maximises risk reduction. Reach out below for a free initial consultation.

Reach Out Here

Free weekly newsletter

Subscribe to the NHI & AI Identity Journal

The latest on NHI and Agentic AI security – articles, research, breaches, news and events every week.

Bonus 33% off our NHI Course when you subscribe.