The Salesloft Drift breach hit 700+ companies with stolen OAuth tokens and never touched a password. Machine identities now outnumber humans 80 to 1, and AI-powered attackers are harvesting them at machine speed. Here is why human-shaped IAM cannot protect AI agents, and what to fix in 90 days.
First seen on securityboulevard.com
Jump to article: securityboulevard.com/2026/08/when-ai-hackers-meet-machine-identity-the-ignored-attack-surface/
![]()

