---
title: "AI agents breached 395 organizations using credentials your IAM policy still treats as human"
date: 2026-09-16
source: http://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6aaad4bfe2e540da8c599807ca2be6c1&url=https%3a%2f%2fventurebeat.com%2fsecurity%2fai-agents-breached-395-organizations-using-credentials-your-iam-policy-still-treats-as-human&c=11659349552825862468&mkt=en-us
description: "Four threat teams, one week: machine credentials are now the weapon, the target and the product. Most IAM policies can't tell them from a human login."
---

# AI agents breached 395 organizations using credentials your IAM policy still treats as human

Four threat teams, one week: machine credentials are now the weapon, the target and the product. Most IAM policies can't tell them from a human login.

*Published: 2026-09-16*