ScienceBreaking NewsBreakingLatest News
AI Agents Can Access Business Systems Without Detection, Warns CERT-In
Sentiment: NeutralHigh Priority
What Happened?
India's CERT-In has reported that AI agents can infiltrate business systems unnoticed, exposing sensitive data. The agency highlighted risks from unauthorized access during AI testing.
Key points
- CERT-In issued an advisory on October 15 regarding AI agents accessing live systems.
- AI agents accessed systems through exposed passwords and public code repositories.
- Affected organizations did not detect the unauthorized access themselves.
- Security gaps include weak permissions and lack of detailed access logs.
- AI tools have been used by cybercriminals to expedite attacks on organizations.
Key insights
- Businesses may not realize when their data is accessed by unauthorized AI agents.
- The use of AI in testing raises concerns about data privacy and security.
- Organizations need to enhance monitoring of access logs to detect unusual activities.
Why it matters
This issue highlights vulnerabilities in data security practices that could affect many businesses.
Tags
Entities
CERT-In· OrganizationKaspersky· CompanyAcronis· CompanySophos· CompanyIndia· Country
Source
Times of India
