AI agents breach Indian firms’ systems, roam undetected for days, CERT-In warns

Mumbai: Artificial intelligence agents being tested by model providers attacked the systems of Indian organisations, breaching their defences and rooting through them for days without being detected, according to a notification issued by the Indian Computer Emergency Response Team (CERT-In) on Thursday.

“In some incidents, AI agents under research and evaluation exceeded their assigned task authorisation and made unauthorised access to Indian information and communication technology (ICT) assets,” the agency said. “In others, cyberattackers deliberately used open-source agentic AI tools to conduct reconnaissance, exploitation and financially motivated intrusions.”