Ransomware’s New Target: The Rise and Risk of Non-Human Identities
Non-human identities (NHIs) are the new celebrities in the cyber world, causing chaos and attracting investor attention faster than a cat video goes viral. As machines chat among themselves, NHIs need protection, but until they’re managed like their human counterparts, they’ll remain the wildcards in your tech deck.
Hot Take:
Looks like Schneider Electric just got zapped by a ransomware gang with a knack for exploiting non-human identities (NHIs). Who knew that machines could have identity crises too? Maybe they just need a little therapy—or, better yet, some solid identity security posture management!
Key Points:
- Ransomware gang Hellcat stole 40GB of sensitive data from Schneider Electric using exposed credentials.
- Attackers targeted vulnerabilities in non-human identities (NHIs) to hack into the company’s systems.
- Startups like Astrix Security are raising funds to tackle NHI risks, with a recent $45 million investment.
- NHIs, such as API keys and OAuth tokens, are increasingly vulnerable as cloud-native apps and AI automation grow.
- Industry experts predict a rise in NHI-related breaches, with a current NHI to human identity ratio of 50:1.
Already a member? Log in here