Governance Gaps Emerge as AI Agents Drive 76% Increase in NHIs

Infosecurity Magazine

April 9, 2026 at 10:00 AM

Overview

A recent report from the SANS Institute reveals a significant rise in non-human identities (NHIs), with AI agents contributing to a 76% increase. This surge is concerning because NHIs can be used by malicious actors to impersonate legitimate users, leading to potential security breaches and fraud. Organizations are now facing challenges in governance and identity management as these AI-driven identities proliferate. The report emphasizes the need for companies to reassess their identity verification processes to mitigate risks associated with these non-human entities. As AI continues to evolve, understanding its impact on cybersecurity becomes increasingly vital for businesses and security professionals.

Key Takeaways

Affected Systems: Non-human identities (NHIs), AI-driven systems
Action Required: Organizations should reassess and strengthen their identity verification processes to address risks posed by NHIs.
Timeline: Newly disclosed

Original Article Summary

SANS Institute reveals that AI agents are behind a 76% surge in non-human identities

Impact

Non-human identities (NHIs), AI-driven systems

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Newly disclosed

Remediation

Organizations should reassess and strengthen their identity verification processes to address risks posed by NHIs.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

McKesson discloses breach after ShinyHunters claims patient data theft

BleepingComputer

McKesson, a major player in healthcare and pharmaceutical distribution, has reported a cybersecurity incident involving unauthorized access to its third-party applications. The ShinyHunters hacking group claims to have stolen an alarming 284 million patient records, raising serious concerns about data privacy and security in the healthcare sector. This breach could potentially expose sensitive information of millions of patients, emphasizing the vulnerability of healthcare systems to cyberattacks. As the situation develops, it is crucial for patients and healthcare providers to be aware of the implications, particularly regarding identity theft and the misuse of personal information. McKesson's disclosure serves as a stark reminder of the ongoing challenges faced by organizations in safeguarding their data against increasingly sophisticated cybercriminals.

Aug 28, 2026

Berlin Refuses to Pay Hackers Who Stole Data From the City's State Network

The Hacker News

Berlin's state government has confirmed that it is facing an extortion attempt after hackers compromised the city's administrative network in August. The attackers have demanded a ransom, but officials have stated they will not pay. Forensic investigations have revealed additional data leaks, particularly affecting the Senate Department for Mobility, Transport, Climate Protection and Environment. This incident raises concerns about the security of public sector data and the potential risks of similar attacks on other cities and government entities. The refusal to pay may embolden attackers, while also highlighting the ongoing challenges of cybersecurity in public administration.

Aug 28, 2026

Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable

The Hacker News

Cosmos Labs has alerted users about a serious flaw in the Cosmos EVM module that allowed attackers to drain funds from six blockchains between August 20 and August 25, 2026. The vulnerability, identified as GHSA-7g4w-cg88-2, is classified as Critical, yet it lacks a CVE identifier or CVSS score, which raises concerns about its management. This situation has left multiple blockchains at risk, as they were all vulnerable due to this shared module. The exploitation of this flaw not only resulted in financial losses but also poses broader implications for the security and trustworthiness of blockchain technologies. Users and developers on these affected blockchains need to be vigilant and consider taking immediate steps to safeguard their assets.

Aug 28, 2026

PaperCut releases second emergency patch for exploited flaws

BleepingComputer

PaperCut has issued a second emergency patch for its NG and MF print management software due to two vulnerabilities that are currently being exploited. Researchers found that there were ways to bypass the initial fixes provided in the first patch, which prompted the urgent release of this new update. Organizations using PaperCut's software should prioritize applying this patch to protect against potential attacks, as the vulnerabilities can lead to unauthorized access and exploitation. It’s critical for users to stay informed and ensure their systems are updated to mitigate these risks.

Aug 28, 2026

Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication

The Hacker News

Attackers are taking advantage of a recently patched vulnerability in PaperCut NG and MF software, allowing them to execute arbitrary code without needing authentication. This flaw gives unauthorized users remote access to the application's trusted configuration, which can be exploited to run Java code within the system. PaperCut has responded by releasing an emergency fix to address this issue and enhance security measures. Organizations using these PaperCut products should act quickly to apply the latest updates to safeguard their systems from potential exploitation. Failure to patch could leave systems vulnerable to significant security breaches.

Aug 28, 2026

68-year-old imprisoned after making $1.3 million by pirating IPTV services

BleepingComputer

A 68-year-old man in the U.K. has been sentenced to over six years in prison for running an illegal IPTV service that earned him approximately £980,812 ($1.3 million) over three years. The service provided unauthorized access to television channels and content, violating copyright laws. This case emphasizes the legal risks associated with pirating digital content and highlights how authorities are cracking down on such illegal operations. The man was arrested as part of a broader effort to combat IPTV piracy, which has implications for both content creators and legitimate service providers. The sentencing serves as a warning to others considering similar activities that the consequences can be severe.

Aug 28, 2026