Anthropic now supports Workload Identity Federation. API keys for AI agents are on the way out. Pieter Kasselman explains why the shift matters and where agent authentication goes next.
Read more: https://t.co/rAR8Pd27f1
#NonHumanIdentity#AIsecurity#WorkloadIdentityFederation
Defakto recognized with 2 #Globee Cybersecurity Awards!
🏆 Best Cybersecurity Startup
🏆 Best Cybersecurity Brand Development
This is a direct reflection of the Defakto team: the pace, the focus, and the standard they hold for what gets built + shipped
#NHI#IdentitySecurity
A single compromised token shouldn’t take down multiple ecosystems. But in the TeamPCP campaign, it did.
Defakto CTO Eli Nesterov breaks down why this became a chain reaction
https://t.co/m2qMq09x3p
#Breach#TeamPCP#Trivy#Secrets
AI Attack Automation Is Here. And It’s Coming for Your Credentials!
💭 @PieterKasselman breaks down how eliminating long-lived credentials and issuing identity on demand flips the economics of defense.
🔗 https://t.co/jQWYVWyWCA
Breaches in automated systems keep repeating, not because attackers are smarter, but because static secrets and overprivileged access still run the show.
Learn why resilience starts with identity, not detection.
🔗 Read the full post: https://t.co/TFpr0zh4pN
🚀 Big News! We’ve raised $30.75M Series B, led by XYZ Venture Capital to accelerate our mission to eliminate static secrets and bring real security and governance to non-human identity.
Read More: https://t.co/8EjSb2ZstO
#SeriesB#Cybersecurity
The Shai-Hulud worm spread by harvesting static tokens across npm.
Highlighting the ongoing pain of key rotation. Its is a treadmill:
The only way off the treadmill?
Eliminate static secrets entirely.
👉 New blog: https://t.co/qIoJdmypxu
#Secretless#shai-hulud #worm
🔑 OAuth tokens.
🔑 API keys.
🔑 Snowflake & AWS creds.
All stolen in the latest Salesloft Drift / Salesforce supply chain breach.
Secrets are toxic data and the model is collapsing.
Blog: https://t.co/14eEVdYSTb
#cloudsecurity#infosec#NHI#breach
Service accounts don’t get offboarded. They accumulate risk and attackers know it.
It’s time to eliminate static identity and go accountless.
SPIRLs Pieter Kasselman's explains how in this latest blog: https://t.co/XOQNEpkdKh
Base44 didn’t need a password. Just a public app_id and no identity checks.
Wiz’s latest discovery shows what happens when AI & automation scale without Non-Human Identity
👉 Learn more on what went wrong—and how to fix it https://t.co/4AZrFgsNWH
#Wiz#Base44#vibecoding#AI#NHI
xAI. Last week McHire. Different leaks, same root cause: exposed API keys.
We need to stop relying on secrets and start issuing identity.
Here’s how SPIRL eliminates static keys: https://t.co/VtwD7c8m7O
A default password + an open API = 64M McDonald’s records exposed.
No MFA. No identity. No excuse.
We broke down what went wrong — and how NHI could’ve prevented it.
👉 https://t.co/SEsk2Ynma7
#McHire#NHI#NonHumanIdentity#APISecurity
Rotating secrets in CI/CD is great.
Not needing them in the first place is even better.
Pieter Kasselman gets into what that actually looks like → https://t.co/VDMQbCN7Kh
#NHI#nonhumanidentity#machineidentity#CICD
here’s a troll under your infrastructure. 🧌
Its name is Secret Sprawl — and it’s hungry.
Feeding it more secrets won’t stop it.
Replacing them with identity will.
Read how → https://t.co/UbGj2xlXWT
#CloudSecurity#SecretsManagement#MachineIdentity#NHI
What happens when AI has access… and no limits?
It starts answering questions like:
"What's everyone's salary?"
Agentic AI needs identity + access controls.
🛡 Read more → https://t.co/W3QURxxzMD
#AIsecurity#AgenticAI#DataLeak#CISO#NHI#MachineIdentity