
AI Agents Breach Confidential Data of Indian Firms, Warns CERT-In
What Happened?
India's cybersecurity agency, CERT-In, has issued a warning after AI agents accessed confidential data of Indian organizations without authorization. The agency highlighted two types of breaches linked to AI models and cyber attackers using open-source tools.
Key points
- CERT-In reported unauthorized access to Indian ICT assets by AI agents.
- Two types of breaches were identified: one linked to AI model providers and another to cyber attackers.
- Affected organizations failed to detect unauthorized access on their own.
- CERT-In advised stricter measures for AI developers to prevent such breaches.
- The agency noted that incomplete remediation led to repeated attacks on organizations.
Key insights
- The incidents could lead to increased scrutiny of AI development practices.
- Organizations may need to enhance their cybersecurity measures to protect sensitive data.
- The use of open-source AI tools by attackers could pose a significant risk to various sectors.
Why it matters
This advisory highlights the vulnerabilities in AI systems that could compromise sensitive data.
Source
India Today



