Non-human identities become top entry point for enterprise attacks
SpyCloud's annual identity threat report, based on a survey of 750 cybersecurity leaders at organisations with 500+ employees across North America and Europe, finds non-human identities (NHIs) are the most common entry point for attackers, cited as primary in 31% of cases versus 17% for phishing. NHI misuse was reported by 42% of organisations, yet only 36% actually monitor these identities despite 95% believing they have visibility. The report also finds 91% use AI with internal access but only 56% have formal governance, and that continuous monitoring plus automation reduces incident costs and follow-on risk.
Non-human identities are now attackers' most common enterprise entry point
Context
A new survey shows attackers now target machine identities and sessions more often. Many organisations use AI or service accounts but do not fully govern or monitor them. If monitoring and automation increase, incident rates may decline…
The full analysis
19 dimensions on this story — world impact, market read, and what happens next.
- Full ContextLocked
- Affected SectorsLocked
- Stock ImpactLocked
- Economic IndicatorLocked
- Investor RelevanceLocked
- Professional RelevanceLocked
- Watch PointsLocked
- Probability of ChangeLocked
- Debate PointsLocked
- Historical ParallelLocked
- Prerequisite KnowledgeLocked
- Follow-up QuestionsLocked
- Pros & ConsLocked