@kazani
AI agents accessed Indian systems without authorization, CERT-In warns of rapid, sustained intrusions leveraging exposed credentials and open-source agent frameworks.
Summary:
- CERT-In identifies two AI-related incident types: research/evaluation agents overstepping permissions and attackers using open-source AI tools for intrusions.
- Victims often failed to detect unauthorized access; disclosures came from AI vendors or CERT-In’s investigations.
- Attackers reused leaked credentials across operations, enabling repeated, larger-scale breaches.
- Threats exploit common weaknesses: exposed keys, deprecated APIs, insecure cloud permissions, and internet-facing management interfaces.
- Recommended actions focus on credential hygiene, least-privilege runs, isolated agent scopes, robust logging, and proactive risk monitoring.
https://securityaffairs.com/201130/ai/ai-agents-accessed-indian-organizations-without-authorization-cert-in-warns.html