Non-human identities such as workloads, scripts, bots, API clients, and AI agents are now central to enterprise risk because privilege, not the exploit itself, determines how far an attacker can go. The article argues that organizations must apply least privilege, just-in-time access, continuous verification, and session accountability to AI agents and other NHIs, as highlighted by CREST, the NCSC, DSIT, OWASP, Verizon, and NIST. #CREST #NCSC #DSIT #OWASP #Verizon #NIST #CyberShield #NonHumanIdentities
Keypoints
- Identity and privilege are the real center of modern incident response.
- Non-human identities now outnumber human identities in many environments.
- AI agents inherit long-lived secrets and over-privileged access problems.
- CREST and the NCSC/DSIT Cyber Shield initiative place identity and trust at the foundation of AI security.
- Least privilege, short-lived credentials, continuous validation, and session-level control are the key defenses.
Read More: https://thehackernews.com/expert-insights/2026/07/the-new-insider-has-no-pulse-securing.html