SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path
Austin, Texas / USA, September 9th, 2026/CyberNewswire/--SpyCloud, the leader in identity threat protection, today released its annual SpyCloud Identity Threat Report, a survey-based study finding that non-human identities (NHIs) – the AI agents, service accounts, API keys, and authentication tokens that connect to internal systems – have become the most common route attackers take into the enterprise.
SpyCloud 2026 Identity Threat Report, Source: SpyCloud
The survey found that compromised NHIs (31%) are nearly 2x as likely to be the primary entry point compared to phishing and social engineering (17%), the second-ranked answer. NHI-related misuse was also the most commonly reported identity-based event type at 42%, yet the vast majority of organizations aren’t watching for them. While 95% of organizations believe they have adequate visibility into AI- and NHI-related exposures, only 36% monitor them, making machine identities the least-watched category of identity risk in the report. Further amplifying...
Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE