
Contributor urges zero standing privilege for machine identities
A cited survey found 109 machine identities per human and 61% of privileged requests still standing.
12 stories, newest first · one card per story

A cited survey found 109 machine identities per human and 61% of privileged requests still standing.

A CISO argues consolidation fails unless old security tools and their privileged identities are actually decommissioned.

A 2026 comparison ranks 12 machine-identity vendors across certificates, workload identity, and API credentials.

A 2026 buyer ranking of machine-identity tools highlights Venafi, Keyfactor, and DigiCert amid shorter TLS lifetimes.

Hush Security found 12% of 82,000 public GitHub MCP config files contained hardcoded API keys, bearer tokens, and database passwords.

Unit 42 demonstrates that root access on a Kubernetes node lets attackers spoof SPIFFE/SPIRE attestation and harvest co-located workloads' SVIDs.
Akeyless launches Agentic Runtime Authority, enforcing real-time intent-based access control on AI agent actions, with integrations for Claude Enterprise, OpenAI Codex and Amazon Bedrock AgentCore
.webp&w=828&q=75)
SpyCloud survey of 750 security leaders finds compromised non-human identities are the top enterprise entry point, yet only 36% monitor them.

SpyCloud's 2026 survey of 750 security leaders finds compromised non-human identities are the top enterprise entry point, yet only 36% monitor them.

Orchid's CEO recommends inventorying five attributes of AI agent credentials to rein in over-privileged OAuth tokens and service accounts.

Identity sprawl and unowned machine identities leave enterprise access unobserved at runtime; identity fabrics aim to close the gap between policy intent and execution.

NetFoundry survey finds AI deployments will expand enterprise attack surfaces by 14%, with 90% of leaders worried about unapproved employee AI use.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views