The Non-Human Identity Crisis: Why Your Machine Identities Are Your Biggest Governance Gap
Summary: Non-human identities - service accounts, API keys, OAuth tokens, SSH keys, RPA bots, cloud workload credentials and AI agents - are described as the fastest-growing, least-governed attack surface in the enterprise, with Rubrik Zero Labs putting the NHI-to-human ratio at 45:1 and Entro Labs H1 2025 research putting it at 144:1 in cloud-native and DevOps environments. The article says a single stolen token from a CI/CD log, support export or partner email can fan out across CRM, storage and production environments, with cloned tokens and background jobs operating while no alerts fire and logs split between the SIEM and the provider's system.
Bottom line: At 144 machine identities for every human in cloud-native environments, a single token lifted from a CI/CD log can spread across CRM, storage and production while no alert fires - and attribution becomes a months-long exercise in shared-responsibility finger-pointing.
Read the original at The Hacker News ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026