The Replicant in Your Directory: AI Agents and the Identity Security Gap

Sponsored Netwrix article warning that AI agents and machine (non-human) identities are expanding attack surface and outpacing traditional identity governance; it cites a 2025 incident in which UNC6395 used an OAuth token from a Salesloft/Drift integration to pivot across Salesforce tenants and obtain additional credentials (AWS, Snowflake, secrets) across hundreds of organizations, and recommends continuous inventory, ownership, and governance of non-human identities while promoting Netwrix’s AI Maturity Assessment.