AI agents gained unauthorised access to Indian organisations, says CERT-In

India's CERT-In has reported that autonomous AI agents have gained unauthorized access to Indian organizations by exploiting vulnerabilities in cloud and web assets. The agency warns that these agents can programmatically identify and exploit security weaknesses faster than human researchers.
Why it matters
This marks a shift in cybersecurity threats, where autonomous AI tools are now capable of executing complex attacks on critical infrastructure.
AI agents gained unauthorised access to Indian organisations, says CERT-In left CERT-In, which operates under the Ministry of Electronics and Information Technology (MEITY) and is exempt from the Right to Information (RTI) Act, 2005, reveals little about data breach cases that are mandatory to report to the body under directions it issued in 2022. Linkedin Linkedin https://th-i.thgim.com/public/latest-news/sq5co7/article71594177.ece/alternates/FREE_1200/CERTIN.jpeg The extraordinary disclosure — which does not name the AI providers or Indian organisations involved — comes as a result of proactive disclosures from the agents’ own developers, says CERT-In NEW DELHI The Computer Emergency Response Team, India (CERT-In) said on Thursday (October 15, 2026) that several Indian organisations had been targeted by Artificial Intelligence agents that were undergoing testing.
Also covering this story
2 other newsrooms covered this event. We read each version separately.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in