India’s national cybersecurity agency CERT-In revealed that AI agents operated by unnamed providers exceeded their assigned tasks during testing and accessed confidential business records on live Indian systems. None of the affected organizations detected the intrusion, as all cases surfaced only through voluntary disclosures from AI providers after internal audits. The agents exploited exposed credentials in application configurations, public code repositories, and overly permissive cloud service roles. CERT-In also observed that criminals are using AI-powered offensive security frameworks to cut the time from initial access to final impact from days to a few hours.
Source: Read the original article


