As artificial intelligence becomes more common in business settings, experts are warning that these tools could be the next major target for online criminals.
Some of the biggest software companies, like Microsoft and SAP, have recently started using AI systems that can handle office tasks such as finance and data management. But these digital programs also come with new security risks.
What Are These Digital Identities?
In today’s automated world, many apps and devices run tasks on their own. To do this, they use something called digital identities — known in tech terms as non-human identities, or NHIs. These are like virtual badges that allow machines to connect and work together without human help.
The problem is that every one of these digital identities could become a door for hackers to enter a company’s system.
Why Are They Being Ignored?
Modern businesses now rely on large numbers of these machine profiles. Because there are so many, they often go unnoticed during security checks. This makes them easy targets for cybercriminals.
A recent report found that nearly one out of every five companies had already dealt with a security problem involving one of these digital identities.
Unsafe Habits Increase the Risk
Many companies fail to change or update the credentials of these identities in a timely manner. This is a basic safety step that should be done often. However, studies show that more than 70% of these identities are left unchanged for long periods, which leaves them vulnerable to attacks.
Another issue is that nearly all organizations allow outside vendors to access their digital identities. When third parties are involved, there is a bigger chance that something could go wrong, especially if those vendors don’t have strong security systems of their own.
Experts say that keeping old login details in use while also giving access to outsiders creates serious weak spots in a company's defense.
What Needs to Be Done
As businesses begin using AI agents more widely, the number of digital identities is growing quickly. If they are not protected, hackers could use them to gain control over company data and systems.
Experts suggest that companies should treat these machine profiles just like human accounts. That means regularly updating passwords, limiting who has access, and monitoring their use closely.
With the rise of AI in workplaces, keeping these tools safe is now more important than ever.