NHIs Now the Number One Corporate Entry Point for Hackers
SpyCloud survey finds non-human identities like AI agents and API keys were the primary entry point in 31% of intrusions, nearly double phishing.
SpyCloud's Identity Threat Report, based on a survey of 750 security leaders at organizations with 500+ employees, found non-human identities caused 31% of intrusions versus 17% for social engineering. Only 36% of organizations actually monitor NHIs although 95% believe they have adequate visibility into them. Some 68% of respondents suffered an identity-based event, with NHI-related misuse at 42%, and organizations able to see stolen session cookies reported identity incidents at a lower rate (37% vs 50%).
- NHIs caused 31% of intrusions, nearly double the 17% from social engineering
- 95% of orgs claim NHI visibility but only 36% actively monitor these identities
- 68% of surveyed organizations reported an identity-based incident in the period
- Malware-infected third-party devices (23%) and vendor API key exposure (22%) drive supply chain identity events
- Only 56% have formal governance processes for AI tools and agent privileges
- Vendors
- SpyCloud
From the original article
2 min read at infosecurity-magazine.com
SpyCloud claims non-human identities are the most likely route into the enterprise
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.