Find notable cyber news and cases, enriched with sources, timelines, and signals.

Enterprise identity dark matter overtakes managed identity across North America and Europe

Target Trend
First reported
Last updated
Happening score
H score 19
1 unique sources, 1 articles

Summary

Hide ▲

Orchid Security’s May 19, 2026 identity-gap findings show unmanaged identity exposure now outweighs visible identity across North American and European enterprises, raising the chance that Agent AI and threat actors can abuse weak IAM controls. The measured pattern is significant because identity dark matter has become the larger share of identity state, while privilege sprawl and orphan accounts remain widespread.

Related Happenings

Orchid Security launches continuous identity observability for enterprise applications

Security Tool/Service
First: 04.02.2026 13:58 Last: 04.02.2026 13:58 Sources 1

About this happening: **Orchid Security** introduced **continuous identity observability** for **enterprise applications**, giving security teams new visibility into identity usage that sits outside tr...

Keycard raises $38 million for AI-agent IAM platform

Industry Action
First: 22.10.2025 15:39 Last: 22.10.2025 15:39 Sources 1

About this happening: **Keycard** emerged from stealth with **$38 million** in funding to scale an **IAM platform for AI agents**. The capital came from an **$8 million seed round** and a **$30 million...

Timeline

  1. 19.05.2026 14:58 2 articles · 8d ago

    Orchid Security releases Identity Gap: Snapshot 2026

    Initial Disclosure

    Orchid Security released Identity Gap: Snapshot 2026 for enterprise identity environments on May 19, 2026, highlighting that "identity dark matter" now outweighs visible identity elements 57% vs. 43% across North American and European enterprises. The findings also point to two out of every three nonhuman accounts being created locally inside applications, 70% of applications having excessive privileged accounts, and 40% of all accounts becoming orphaned, creating a stronger opening for unauthorized access by threat actors and Agent AI.

    Show sources