Ninety-five percent of organizations believe they have visibility into their AI and machine identity exposures, yet only 36% are actually monitoring them.
SpyCloud, the leader in identity threat protection, today released its annual SpyCloud Identity Threat Report, a survey-based study finding that non-human identities (NHIs) – the AI agents, service accounts, API keys, and authentication tokens that connect to internal systems – have become the most common route attackers take into the enterprise.
SpyCloud 2026 Identity Threat Report, Source: SpyCloud
The survey found that compromised NHIs (31%) are nearly 2x as likely to be the primary entry point compared to phishing and social engineerin...