aiqbench takeAI Safety

The report highlights a critical gap in enterprise security where non-human identities (NHIs), including AI agents and API keys, have surpassed phishing as the primary vector for attacks. Despite 95% of organizations claiming visibility into these exposures, only 36% actively monitor them, leaving privileged service accounts vulnerable to long-term exploitation due to lack of rotation and ownership. This shift underscores the urgent need for automated governance frameworks specifically designed to manage the lifecycle and risk posture of machine identities in AI-driven environments.

Source coveringCybersecurity News

What this isA model's reading of the article and related coverage, written for aiqbench. Not the publisher's words.

SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise

Cybersecurity NewsSeptember 9, 20266 min read

Austin, Texas / USA, September 9th, 2026, CyberNewswire Ninety-five percent of organizations believe they have visibility into their AI and machine identity exposures, yet only 36% are actually monitoring them. SpyCloud, the leader in identity threat protection, today released its annual SpyCloud Identity Threat Report, a survey-based study finding that non-human identities (NHIs) the AI […] The post SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise appeared first on Cyber Security News.

Ninety-five percent of organizations believe they have visibility into their AI and machine identity exposures, yet only 36% are actually monitoring them. SpyCloud, the leader in identity threat protection, today released its annual SpyCloud Identity Threat Report, a survey-based study finding that non-human identities (NHIs) the AI agents, service accounts, API keys, and authentication tokens that connect to internal systems have become the most common route attackers take into the enterprise. The survey found that compromised NHIs (31%) are nearly 2x as likely to be the primary entry point compared to phishing and social engineering (17%), the second-ranked answer. NHI-related misuse was also the…

Excerpt shown under the publisher's RSS terms · 104 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article