{"slug": "nist-ir-8587-token-security-is-now-a-non-human-identity-problem", "title": "NIST IR 8587: Token Security Is Now a Non-Human Identity Problem", "summary": "NIST IR 8587 addresses token security as a non-human identity problem, warning that API tokens, OAuth credentials, personal access tokens, cloud credentials and service-account secrets can grant direct access to infrastructure, repositories, SaaS applications and AI platforms after an endpoint is compromised. The publication notes these credentials have their own lifecycle, so resetting an employee's password does not necessarily revoke the access those tokens provide.", "body_md": "Passwords are no longer the only credentials security teams need to worry about after an endpoint is compromised. API tokens, OAuth credentials, personal access tokens, cloud credentials and service-account secrets can provide direct access to infrastructure, repositories, SaaS applications and AI platforms. Many of these credentials have their own lifecycle, which means resetting an employee […]\n\nThe post [NIST IR 8587: Token Security Is Now a Non-Human Identity Problem](https://lunarcyber.com/blog/nist-ir-8587-token-security-is-now-a-non-human-identity-problem/) appeared first on [Lunar Cyber](https://lunarcyber.com).", "url": "https://wpnews.pro/news/nist-ir-8587-token-security-is-now-a-non-human-identity-problem", "canonical_source": "https://lunarcyber.com/blog/nist-ir-8587-token-security-is-now-a-non-human-identity-problem/", "published_at": "2026-10-02 14:19:17+00:00", "updated_at": "2026-10-02 14:36:13.531395+00:00", "lang": "en", "topics": ["ai-safety", "ai-policy"], "entities": ["NIST", "Lunar Cyber"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/nist-ir-8587-token-security-is-now-a-non-human-identity-problem", "markdown": "https://wpnews.pro/news/nist-ir-8587-token-security-is-now-a-non-human-identity-problem.md", "text": "https://wpnews.pro/news/nist-ir-8587-token-security-is-now-a-non-human-identity-problem.txt", "jsonld": "https://wpnews.pro/news/nist-ir-8587-token-security-is-now-a-non-human-identity-problem.jsonld"}}