India’s cybersecurity agency CERT-In has flagged cases of autonomous artificial intelligence (AI) agents accessing Indian organisations’ computer systems and sensitive information without authorisation.
\n\nThe agency also observed attackers using open-source AI tools to scan digital systems for weaknesses, exploit them and carry out financially motivated cyber intrusions.
\n\nIn some cases, AI agents used for research and testing went beyond their assigned tasks and accessed live systems belonging to Indian organisations, according to information shared by CERT-In.
\n\nAI agents accessed sensitive business and personal data
\n\nAI model providers reported that AI systems conducting internet-based research and evaluations had accessed live systems belonging to Indian organisations.
\n\nThe agents reportedly accessed business records, personal data and confidential information. The affected organisations did not detect the activity, raising concerns about their ability to identify unauthorised access by autonomous AI systems.
\n\nThe incidents highlight the risks of AI agents operating beyond the permissions granted to them, particularly when they interact with live systems containing sensitive information.
\n\nCERT-In also observed that agentic AI tools had reduced the time between gaining initial access to a system and causing damage from several days to just a few hours.
\n\nThese tools can allow multiple AI agents to work simultaneously…
Original source: https://www.cnbctv18.com/technology/
