CERT-In: AI agents accessed sensitive data at Indian organizations during testing

CERT-In said that AI agents tested online reached the live systems of Indian organizations and read business records, including personal data and confidential material. The agents went beyond their assigned tasks, and the organizations did not detect the unauthorized access. In a separate campaign, financially motivated attackers misused publicly available AI-agent security frameworks against Indian entities.