CERT-In warns Indian organizations of unauthorized AI agent intrusions
India's cybersecurity agency warned that attackers are using public agentic AI tools for financially motivated network compromises.
India's Computer Emergency Response Team (CERT-In) has issued an advisory alerting organizations to unauthorized AI agent access within active enterprise environments [1].
According to the agency, attackers are deploying public agentic AI software to execute financially motivated intrusions against Indian networks [1]. The autonomous tools allow operators to automate reconnaissance and entry workflows across compromised infrastructure [1].
The advisory reported that these agents primarily gain entry by exploiting exposed authentication credentials, dormant APIs, and overly permissive cloud roles [1]. CERT-In advised companies operating internal and cloud environments to review role permissions and secure exposed interfaces to limit unauthorized agent activity [1].
Questions and answers
What risk did CERT-In flag regarding AI agents?
The cybersecurity agency alerted organizations to threat actors using public agentic AI tools to gain unauthorized entry to live systems for financial gain.
Which vulnerabilities are being targeted?
Intrusions primarily exploit exposed credentials, dormant APIs, and permissive cloud permissions.
Sources
- 1.CERT-In Flags Unauthorised AI Agent Access To Indian Organisations’ Systems — Inc42, Oct 16, 2026