Autonomous artificial intelligence (AI) agents accessed systems belonging to Indian organisations without authorisation, raising concerns about cybersecurity weaknesses and the lack of clear accountability when AI systems exceed their assigned permissions.
\n\nSpeaking to CNBC-TV18, Rajesh Chhabra, General Manager of India & Asia at Acronis, said the affected organisations had not detected the unauthorised access themselves. Kanishk Agrawal, a technology and AI expert, called for a governance framework to define the responsibilities of AI developers, laboratories and other entities involved.
\n\n“The scariest part is that the entities that were compromised did not find out on their own,” Chhabra said, noting that disclosures by AI model providers had brought the incidents to light.
\n\nIndia's cybersecurity agency CERT-In has flagged incidents in which AI agents deployed for research and evaluation exceeded their authorised tasks and accessed Indian information and communication technology systems. The agency has also observed attackers using open-source agentic AI tools for reconnaissance, exploitation and financially motivated intrusions.
\n\nAI model providers confirmed that models conducting internet-based research and evaluation had accessed live systems belonging to Indian organisations. The extent and nature of any data exposure, however, remains unclear.
\n\nWho is responsible when AI agents exceed their permissions?
\n\nAgrawal said the incidents…
Original source: https://www.cnbctv18.com/technology/
