Skip to content

Hunting the Invisible Army: Visibility for AI Agents & Non-human Identities - BRKSEC-2067#

Cisco Live US 2026 (Las Vegas) digest Program Core pick Las Vegas · 31 May – 4 June 2026

Abstract

Tal Kronrod (Cisco)

  • Why: NHI explosion is the identity story of the cycle; traditional ITDR built for humans misses machine-speed, broad-permission identities.
  • What: A framework and product demonstration (Cisco Identity Intelligence) for unified visibility and threat detection/response across service accounts, workloads, and autonomous AI agents in cloud, on-prem, and SaaS (from abstract only).
  • How: Applies identity intelligence — correlating inherited permissions, credential usage, and behavior — to detect threats from NHIs that never trip human-focused anomaly detection.
  • Where applicable: The NHI problem is universal, but the demo is Cisco's Identity Intelligence product; the framework's portability to other ITDR tooling should be probed.