NHIs Now the Number One Corporate Entry Point for Hackers

SpyCloud's Identity Threat Report finds non-human identities (AI agents, service accounts, API keys and tokens) are increasingly exploited — accounting for 31% of intrusions versus 17% for social engineering — while most organizations overestimate their visibility and lack formal governance, credential rotation and offboarding practices; the report also highlights supply-chain identity exposures and recommends improving visibility and controls to reduce identity-based events.