Non-Human Identities
Coverage of Non-Human Identities in the Nexus archive.
- Ghost Credentials Expose Cloud Systems to Hidden Identity Risks
Security researcher Aleksandr Krasnov discovered that dormant non-human identities can create security blind spots in cloud systems. He introduced NHI Hound, an open-source tool designed to identify trust paths and mitigate these risks.
- Cyera to acquire Israeli AI startup Oasis Security in $1 billion deal
Cyera, a cybersecurity company, is acquiring Israeli AI startup Oasis Security in a $1 billion deal. Oasis Security specializes in technology for managing non-human identities, such as AI agents, to help businesses mitigate risks associated with autonomous tools.
- With Complex Cloud Integrations, Small Errors Lead to Major Compromises
Researchers identified an exploit chain involving over-permissioned roles, secrets discovery, and non-human identities that could compromise a popular automation service. The vulnerability highlights risks from complex cloud integrations where minor errors lead to significant security breaches.
- [Webinar] Eliminate Ghost Identities Before They Expose Your Enterprise Data
In 2024, 68% of cloud breaches were caused by compromised service accounts and forgotten API keys, not phishing or weak passwords. Enterprises face risks from unmanaged non-human identities like automated credentials, with 40–50 per employee, often left unaddressed after project closures or employee departures.