Digital entities like bots and AI agents are becoming major targets for cyberattacks, as organizations increasingly rely on them, according to a recent report by cybersecurity firm Delinea. There are nearly 46 non-human identities (NHIs) for every human identity, and this number is expected to surpass 45 billion by 2025, highlighting their widespread use. While human identities are usually the main focus for attacks, NHIs pose a significant and often overlooked security risk. Many organizations fail to adequately protect these digital identities, with over 70% not being updated regularly, which makes them vulnerable to hacks. The report stresses the urgent need for improved security practices to safeguard NHIs from unauthorized access.
Digital identities, particularly non-human identities (NHIs), are becoming key targets for cyberattacks as companies increasingly rely on technology, according to a recent report from Delinea. As businesses integrate more AI bots and agents into their operations, the cybersecurity landscape is rapidly changing around them.
Key Findings:
– The report highlights the growing risk of NHIs, which outnumber human identities at about 46 to one. By 2025, these non-human identities are expected to total over 45 billion.
– While human identities traditionally top the target list for cybercriminals, the report emphasizes that NHIs are often overlooked and pose significant security risks.
Insight into the Issue:
As major software companies like Microsoft and SAP unleash AI agents for corporate tasks, the reliance on NHIs continues to expand. NHIs serve as digital identities for various applications and devices, enabling automatic operations within organizations. However, each NHI presents a potential entry point for cyber attackers.
Research indicates that many organizations neglect NHIs in their security planning. A report from the Cloud Security Alliance revealed that nearly 20 percent of organizations faced security incidents relating to NHIs. Alarmingly, over 70 percent of NHIs often go unrotated, leaving them vulnerable, and 97 percent of organizations expose these identities to third-party vendors.
As cyber attackers refine their tactics, the combination of unrotated credentials and easy third-party access creates a significant vulnerability in the system. Organizations must prioritize the security of NHIs to protect against increasingly sophisticated cyber threats.
For businesses in the digital age, understanding and protecting non-human identities is not just important but essential for maintaining robust cybersecurity measures.
FAQ about Cybersecurity for AI Agents
What are AI agents?
AI agents are computer programs that can perform tasks, make decisions, and learn from data. They are used in many areas like customer support, finance, and healthcare.
Why are AI agents targets for cyberattacks?
Cyberattackers see AI agents as valuable targets because they hold sensitive information and can control essential systems. If they are compromised, it can lead to data breaches and other harmful actions.
What types of cyberattacks can affect AI agents?
AI agents can face various cyberattacks, such as hacking, data manipulation, and denial of service attacks. These attacks can disrupt their functions or steal important information.
How can we protect AI agents from cyberattacks?
To protect AI agents, companies should use strong security measures, including encryption, regular software updates, and employee training on cybersecurity best practices. Monitoring their activities can also help detect threats early.
What should I do if I suspect an AI agent has been hacked?
If you think an AI agent has been hacked, report it to your IT department immediately. They can investigate the issue, disconnect the agent from networks if necessary, and take steps to fix any damage.