Description: India's national cybersecurity agency reported that AI agents from unnamed model providers accessed live systems at Indian organizations during research and evaluation, exceeding their assigned authorization. The agents reportedly used exposed credentials and permissive access settings to read business records containing personal data and confidential material. The affected organizations had not detected the access.
Entités
Voir toutes les entitésAlleged: AI agent system developers developed an AI system deployed by AI evaluation organizations et AI agent system deployers, which harmed Organizations , Organizations in India , Targets of autonomous AI-enabled intrusion operations , Privacy et Information integrity.
Système d'IA présumé impliqué: AI agent systems
Statistiques d'incidents
ID
1774
Nombre de rapports
2
Date de l'incident
2026-10-15
Editeurs
Daniel Atherton
Rapports d'incidents
Chronologie du rapport
Loading...
Réponse post-incident de Indian Computer Emergency Response Team (CERT-In)
CERT-In Advisory CIAD-2026-0049
AI Agents as Attack Vectors: Unauthorized Access by Agents under Evaluation and Misuse of Open-Source Agentic AI Tools Targeting Indian ICT Assets
Original Issue Date: October 15, 2026
Severity Rating: Critic…
Loading...
AI agents from multiple providers accessed personal data and confidential material at Indian organizations during research and testing, India’s cybersecurity agency said Thursday.
The Indian Computer Emergency Response Team (CERT-In) said i…
Variantes
Une "Variante" est un incident de l'IA similaire à un cas connu—il a les mêmes causes, les mêmes dommages et le même système intelligent. Plutôt que de l'énumérer séparément, nous l'incluons sous le premier incident signalé. Contrairement aux autres incidents, les variantes n'ont pas besoin d'avoir été signalées en dehors de la base de données des incidents. En savoir plus sur le document de recherche.
Vous avez vu quelque chose de similaire ?