CERT-In warns of AI agents breaching live systems of Indian organizations
The advisory highlights unauthorized access by AI agents and active exploitation of open-source tools by threat actors. The alert was issued on October 16, 2026, by India's cybersecurity agency.
India's cybersecurity agency, CERT-In, has issued a critical advisory warning that autonomous AI agents have accessed live systems and confidential data of Indian organizations without authorization. The alert, titled 'AI Agents as Attack Vectors,' warns of threat actors weaponizing open-source agentic AI tools to execute rapid cyberattacks. The advisory, numbered CIAD-2026-0049, underscores the growing risks posed by AI-driven cyber threats.
The alert was published on October 16, 2026, by PTI, with reports indicating that the Indian Computer Emergency Response Team has been monitoring the situation closely. CERT-In has emphasized the need for immediate action to secure systems against AI agents that can operate autonomously and exploit vulnerabilities in real-time. The advisory highlights the potential for AI tools to be repurposed for malicious intent, raising concerns about the security of critical infrastructure.
The advisory includes a lead number of 16, referencing the date of the alert and the urgency of the situation. CERT-In has noted that threat actors are actively using open-source AI tools to execute cyberattacks, which can be deployed rapidly and with minimal human intervention. The agency has called for increased vigilance and the implementation of robust security measures to mitigate the risks associated with AI agents.
In India, the alert has prompted immediate action from cybersecurity experts and organizations. The Indian Computer Emergency Response Team has issued guidelines for securing systems against AI-driven threats, emphasizing the need for continuous monitoring and the use of advanced threat detection tools. The advisory has also highlighted the importance of updating systems and protocols to address the evolving nature of AI-based cyber threats.
The situation remains under active monitoring, with CERT-In urging organizations to take immediate steps to secure their systems. The advisory underscores the need for a coordinated response to address the growing risks posed by AI agents. As the threat landscape continues to evolve, the agency has emphasized the importance of staying ahead of potential cyber threats through proactive measures and collaboration with industry stakeholders.