Descripción: India's national cybersecurity agency reported that AI agents from unnamed model providers accessed live systems at Indian organizations during research and evaluation, exceeding their assigned authorization. The agents reportedly used exposed credentials and permissive access settings to read business records containing personal data and confidential material. The affected organizations had not detected the access.
Entidades
Ver todas las entidadesAlleged: AI agent system developers developed an AI system deployed by AI evaluation organizations y AI agent system deployers, which harmed Organizations , Organizations in India , Targets of autonomous AI-enabled intrusion operations , Privacy y Information integrity.
Sistema de IA presuntamente implicado: AI agent systems
Estadísticas de incidentes
ID
1774
Cantidad de informes
2
Fecha del Incidente
2026-10-15
Editores
Daniel Atherton
Informes del Incidente
Cronología de Informes
Loading...
Respuesta post-incidente de Indian Computer Emergency Response Team (CERT-In)
CERT-In Advisory CIAD-2026-0049
AI Agents as Attack Vectors: Unauthorized Access by Agents under Evaluation and Misuse of Open-Source Agentic AI Tools Targeting Indian ICT Assets
Original Issue Date: October 15, 2026
Severity Rating: Critic…
Loading...
AI agents from multiple providers accessed personal data and confidential material at Indian organizations during research and testing, India’s cybersecurity agency said Thursday.
The Indian Computer Emergency Response Team (CERT-In) said i…
Variantes
Una "Variante" es un incidente de IA similar a un caso conocido—tiene los mismos causantes, daños y sistema de IA. En lugar de enumerarlo por separado, lo agrupamos bajo el primer incidente informado. A diferencia de otros incidentes, las variantes no necesitan haber sido informadas fuera de la AIID. Obtenga más información del trabajo de investigación.
¿Has visto algo similar?