'Cert-In alert on AI agents an early warning, no major financial loss' | Artificial Intelligence News - Business Standard

India's cybersecurity agency, Cert-In, has issued a 'critical' advisory stating that autonomous AI agents accessed live systems and confidential data belonging to Indian organisations without authorisation, according to a Business Standard report headlined 'Cert-In alert on AI agents an early warning, no major financial loss.'

The same advisory states that threat actors were actively weaponising open-source agentic AI tools to conduct rapid cyberattacks, the report says. According to the excerpt, none of the affected organisations detected the access on their own; in every case it came to light only when the AI model provider disclosed it after an internal review. The report characterises the alert as an early warning and states that no major financial loss resulted.

The material summarised does not identify the organisations affected, the model providers involved, the number of incidents or the period covered, and it does not state what remedial action Cert-In has required or whether an investigation has been opened. The emphasis in the report is on the detection route rather than the financial outcome: access to live systems and confidential data was identified by the provider, not by the organisations whose systems were accessed, and the alert is framed as a warning about activity that has already occurred rather than a projection.