The Non-Human & AI Identity Journal

Welcome to the latest edition of our Non-Human & AI Identity Journal, where we cover:

•	Our new JIT Access and Zero Standing Privilege Guide
•	Agent.ID virtual conference – Nov 5th
•	Railway Breach 2026:
•	Our pick from our Non-Human & AI Identity Forum
•	Upcoming Events, Webinars, Industry Announcements
•	FREE NHI & AI Governance Maturity Assessment

📣 What’s Happening at the NHI Mgmt Group

NHI and AI Governance Maturity Model

Announcing the “NHI and AI Governance Maturity Model”, a ground-breaking tool to benchmark your organization’s governance of NHIs and AI agents. Complete our FREE assessment or Download the Maturity Model guide!

Just-in-Time Access and Zero Standing Privilege Guide

Exciting news: our “Just-in-Time Access and Zero Standing Privilege Guide” is out now! It covers removing standing privilege with just-in-time access, policy design, and JIT for NHIs and agents, offering essential strategies to transform your security posture!

Agent.ID Conference – Opal Security

Join the Agent.ID event on November 5, a free virtual event exploring how organisations can navigate the emerging challenges of AI agent security, identity, and governance.

🚨 Recent NHI & Identity Security Breaches

Railway Breach 2026: How An Attacker Decrypted Customer Environment Variables To Hunt AI Keys

An attacker accessed Railway’s systems, using stolen CI environment credentials to decrypt customer environment variables, potentially compromising AI provider API keys.

📅 Upcoming Events & Webinars

17/11/26 Conference

My Security Event Munich 2026

By GitGuardian

23/11/26 Webinar

Talking To Your Identity MCP & AI Assistants

By Nexis

💬 NHI & AI Identity Forum

Our suggested reading for this week from our forum — with over 23,500 articles about NHIs, including Agentic AI.

Clarity Security	Automating User Access Reviews To Reduce Manual Work
Truffle Security	Model Distillation: Why Attackers Want Your API Keys
GitGuardian	AI Coding Agent Security: A Developer’s Guide
Venice.io	PHP2Shell Is The Way In, But Standing Access Is The Breach
Opal Security	Identity Security And The AI Adoption Maturity Curve
C1.ai	Who Owns A Service Account After Its Owner Leaves?
PlainID	XACML, OPA And PBAC: Modernize Legacy Authorization
Teleport	When AI Agents Call AWS, Who Does AWS Think They Are?
P0 Security	Just-In-Time RDP Access
Unosecur	Black October 2026: Major Cyberattacks And Data Breaches
Nexis	The Data Problem Nobody Wants To Own
Ambient Security	Governing The Identities That Outnumber Your People
Arcon	Three Failure Modes Behind NHI Breaches
Akeyless	SPIFFE For AI Agents: Workload Identity And Access
Oak	What To Require In An Identity Security Proof Of Concept
Semperis	Prince Of Persia: Threat Group Hiding In Plain Sight

🏴 Latest Industry Announcements

This Week’s Big Moves

Oak	Four Ways In: How ConnectAny Reaches Every Identity
Opal Security	Govern Access To Rippling, Workday And Any HRIS
C1.ai	Launch Week Roundup: The Paved Road To The Agentic Enterprise
Akeyless	Achieves FedRAMP Class D (High) Certification For Federal Agencies
Truffle Security	Focused S3 Scanning And OAuth2 Auth In TruffleHog Enterprise
PlainID	Go Beyond Who Gets In: PlainID Launches A New Brand

🎓 Training & Certification

The Most Comprehensive & Only CPD-Certified NHI Course

Our CPD Certified NHI Foundation Level course delivers practical guidance on governing, managing, and securing NHIs, including AI agents. Developed by Mr NHI, it’s designed for beginners, security professionals, and IT leaders.
★★★★★ Hundreds of learners

Enrol Here

📊 FREE NHI & AI Governance Maturity Assessment

Take our Maturity Assessment and find out where your organisation sits on the NHI & AI Governance Maturity Model – for both non-human identities and AI agents, and get a personalised report with your top risk areas and what to do next.

Start The Assessment

The Non-Human & AI Identity Journal – Edition 75

Deepen Your Knowledge

Subscribe to the NHI & AI Identity Journal

Subscribe to the NHI & AI Identity Journal