As non-human identities outpace their human counterparts, the need for effective Non-Human Identity (NHI) management is more crucial than ever. Discover why current systems may leave your organization exposed and how a unified governance approach can safeguard against the risks posed by cloud-native development and Agentic AI.

Read original blog post here: https://www.kuppingercole.com/events/ifid2025/blog/non-human-identity-management-mature-or-just-getting-started

In this episode of the KuppingerCole Analyst Chat, Matthias Reinwarth sits down with cybersecurity CTO & analyst Alexei Balaganski to explore the dramatic evolution of API management and security.

They unpack:

1. Why APIs are now the backbone of AI agents and how MCP (Model Context Protocol) is driving a new decentralized ecosystem.

2. The explosion of shadow APIs & hidden interfaces from your printer to your coffee machine and why they pose serious risks.

3. How edge computing & WebAssembly are decentralizing everything, making old API gateway models obsolete.

4. The critical need for API posture management, identity & access controls for non-human identities, and full lifecycle security even before you write a line of code.

Learn why API security isn’t just a tech problem, it’s the next big business risk, how the market is consolidating, and what’s coming in the new Leadership Compass on API Management & Security.

In this episode of the KuppingerCole Analyst Chat, Matthias Reinwarth is joined by Martin Kuppinger to untangle one of the most complex—and increasingly urgent—topics in digital identity: non-human identities (NHIs).

With AI agents, workloads, service accounts, and API keys exploding in number, it’s no longer enough to rely on traditional IAM structures. But what is an NHI, exactly? And how can organizations secure them without collapsing under the weight of siloed systems and unmanaged identities?

Martin and Matthias explore:

• The blurry boundaries between identities, accounts, secrets, and credentials
• Why "non-human" is a problematic but useful term
• Agentic AI vs. API keys: where identity management really changes
• Practical starting points for managing NHIs in real-world environments

💡 Whether you're a CISO, architect, or IAM practitioner, this episode gives you a pragmatic foundation for approaching NHI—without getting lost in terminology wars.

In this essential episode of the KuppingerCole Analyst Chat, host Matthias Reinwarth welcomes cybersecurity strategist Jonathan Care to explore one of the most pressing challenges CISOs face in 2025: detecting deception in an age of AI-powered attacks.

From deepfakes and behavioral manipulation to vendor impersonation and adversarial AI, attackers are no longer relying on simple phishing emails. They're launching highly personalized, deeply technical, and psychologically crafted deceptions.

Jonathan presents a structured four-part taxonomy of deception and offers actionable insights for CISOs—from implementing callback verification protocols to deploying behavioral analytics and deception detection technologies.

Topics Covered:

1. AI-powered social engineering
2. Digital identity deception & deepfakes
3. Vendor/supply chain impersonation
4. Technical deception & adversarial machine learning
5. Practical steps CISOs can take this week

Discover how Europe plans to reduce its dependency on imported digital technologies through the EuroStack initiative. Learn about strategic proposals for building a resilient, sovereign digital Europe, and uncover the vital roles collaboration and innovation play in achieving long-term economic, social, and environmental resilience in the digital landscape.

Read the original blog post here: https://www.kuppingercole.com/blog/leal/notes-from-cybersec-2025-the-eurostack-vision

Organizational identity is no longer optional

In this episode of the KuppingerCole Analyst Chat, host Matthias Reinwarth is joined by cybersecurity research director John Tolbert to talk about the rising threats of organizational fraud, rogue merchants, and the growing need for robust identity verification at the business level.

Topics covered:

1. What are rogue merchants, and how do they operate?
2. The staggering fraud numbers behind the Paycheck Protection Program (PPP)
3. The importance of Know Your Business (KYB) vs. Know Your Customer (KYC)
4. Why legacy business verification methods are no longer enough
5. How APIs, LEIs, and verifiable digital identities can help
6. The role of CIEM and B2B CIAM in detecting and preventing organizational fraud

Whether you're in cybersecurity, compliance, finance, or e-commerce, this episode unpacks how fraud at the organizational level is growing—and what tools and frameworks can stop it.

Unlock vital strategies on how to defend your organization from costly supply chain attacks by ensuring airtight third-party access management, understanding the latest regulatory demands, and implementing cutting-edge IAM solutions that go beyond perimeter defenses.

Read the original blog post here: https://www.kuppingercole.com/blog/ashford/third-party-risk-is-the-new-front-door

In this episode, Matthias Reinwarth welcomes KuppingerCole Membership Product Owner Christie Pugh to share her unique perspective on the European Identity and Cloud Conference (EIC) 2025.

🎯 As a first-time attendee coming from an operational background, Christie highlights how EIC goes beyond the event itself—and how the KuppingerCole Membership can provide continuous value all year long.

🚀 Key Topics Covered:

✅ Making IAM research actionable through KuppingerCole’s AI-powered chatbot
✅ The value of year-round access to analyst insights via membership
✅ Highlights from the sovereign cloud & geopolitical risk roundtable with Mike Small
✅ Why identity needs to serve the underserved—reflections on inclusion, ethics & equality
✅ Behind-the-scenes moments from Berlin, awards night, and networking

Tune in for a different angle on what makes EIC such a powerful experience—and how to keep that momentum going.

Beware the digital impostors! Deepfakes aren't just sci-fi anymore; they're here, and they're a threat to your bank account, your vote, and your trust. Peek behind the curtain of this digital deceit, where emerging technologies fight to expose forgeries and keep our truth intact. Discover the urgent strategies needed to outpace this digital battleground.

Read the original blog post here: https://www.kuppingercole.com/blog/celik/what-to-expect-from-deepfake-threats-and-how-likely-are-we-to-develop-effective-detection-tools

🔍 In this follow-up to KuppingerCole’s EIC 2025 workshop on Identity Fabrics and Reference Architectures, Matthias Reinwarth and Dr. Phillip Messerschmidt dive deeper into the most interesting and unanswered audience questions. From context data management and dynamic authorization to mapping architectures for implementation—this episode addresses the nuances that couldn’t be covered during the live session.

📌 Topics Covered:

1. The difference between integrations and context data source management
2. Mapping capabilities to tools and operationalizing the reference architecture
3. Zero Trust, dynamic authorization, and where they sit in the framework
4. Handling multi-role identities and complex IAM scenarios
5. Guidance for presenting IAM architecture to senior management

📺 Whether you joined the workshop or not, this episode is packed with actionable insights for anyone working with IAM strategy, architecture, or implementation.