Non-Human Identities: The Privileged Accounts Nobody Offboards
Service accounts, API keys, OAuth tokens, certificates and the identities AI tools run under all hold access to client systems. Most have no MFA, no owner and no offboarding process, and every new AI tool a team adopts creates more of them. In 2025, attackers used stolen OAuth tokens from the Salesloft Drift chat app to pull data out of Salesforce, and Google’s threat intelligence team counted more than 700 organizations potentially affected.
This session covers what non-human identities are, how attackers use them, and how to bring the ones in your clients’ environments under control. Most of it is method that works with whatever tools you run. The last few minutes are a short Panthera demo: finding a new service account and disabling it until someone reviews it.
Save your seat
Where they sit
Where non-human identities sit in a typical client environment, and why they rarely show up in an access review.
How the Drift breach worked
How the Salesloft Drift breach worked, step by step, and which controls would have stopped it.
What insurers now ask
What cyber insurers now ask about service accounts and privileged access, and what you need to be able to show them.
Can’t make it live? Register anyway.
Wednesday, December 2 at 2:00 PM Eastern. A 25-minute talk, then live Q&A. Register and we’ll send you the recording if you can’t make it live.
