{"data":{"id":"83358791-ce1b-4fdf-bb06-293fbb7c2e8f","title":"SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise","summary":"Non-human identities (NHIs), which are AI agents, service accounts, API keys, and authentication tokens that connect to internal systems, have become attackers' most common entry point into organizations, with 31% of breaches starting this way. Despite 95% of organizations believing they monitor NHI exposures, only 36% actually do, creating a dangerous gap where these identities often stay compromised for months because nobody actively manages them. The report found that 68% of organizations experienced identity-based attacks in the survey period, averaging eight events each.","solution":"N/A -- no mitigation discussed in source.","labels":["security","policy"],"sourceUrl":"https://www.csoonline.com/article/4220209/spycloud-2026-identity-threat-report-finds-non-human-identities-are-now-the-leading-path-into-the-enterprise.html","publishedAt":"2026-09-09T12:00:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["AI agents","service accounts"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-09T12:00:00.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.75,"researchCategory":null,"atlasIds":null}}