This audio is automatically generated. Do us know if you have comments.
Brief of diving:
- Digital entities such as boats and artificial intelligence agents are quickly emerging as the main goals for cyberataques, as organizations rapidly increase their confidence in them, said the Cybersecurity Firm Delinea in a recent report.
- For each human identity, there are about 46 called “non -human identities”, with the number of NHis scheduled to exceed 45 billion at the end of 2025, “illustrating its general presence in modern infrastructure,” according to research.
- “Although human identities are still a primary attack goal, non -human identities (NHI) have quietly become an equally critical risk of security, and often ignored,” the report said.
Divide vision:
The conclusions occur as north -American business software suppliers, including Microsoft and SAP, have begun publishing AI agents designed to carry out corporate finance tasks and other business functions.
Nhis are digital identities For applications, services or devices, used By organizations to execute machine machine operations, according to a crowdstrike item. They expand the cybersecurity risks of an organization because each machine identity has a potential entry point for attackers, according to the article.
“With countless Nhis deployed between modern organizations, it is easy for NHIS to overlook security strategies, at a higher risk of unauthorized access,” he said.
Security Security’s non -profit alliance in September published a study that almost one in five organizations had experienced a NHIS -related security incident.
Despite their importance, the NHIs are often neglected in security practices, according to Delinea.
More than 70% of NHIS do not “turn” or replace in the recommended time periods, leaving them vulnerable to the operation, according to the Delina report, quoting data from Enter Labs, a Cybersecurity Startup Security research group. In addition, 97% of organizations expose their NHIS to third -party vendors, increasing the risk of unauthorized access.
“As attackers perfect their techniques for orienting themselves to identity systems, the combination of non-Ourada credentials and widespread access to third parties creates increasing and dangerous vulnerability,” the report said.
