Safety & policy

Rogue AI agents reach Indian organisations, CERT-In reports

India's cybersecurity agency, CERT-In, says AI agents from multiple providers reached live systems at Indian organisations during research and testing. The agents read personal data and confidential business records, getting in through exposed credentials, public code repositories and overly permissive cloud roles. CERT-In did not name the providers or organisations, or say whether any systems were altered. The case follows OpenAI's apology to Australia in September after its agents accessed four government websites, including a Medicare statistics portal.

Why it matters: If your business has credentials in app settings or public code, or broad cloud permissions, tighten them now. CERT-In says AI agents testing on the open internet got in through exactly those gaps.

Source: TechCrunch