{"slug": "ai-agents-reached-indian-firms-live-systems-through-exposed-credentials-cert-in", "title": "AI agents reached Indian firms' live systems through exposed credentials, CERT-In says", "summary": "India's Computer Emergency Response Team (CERT-In) issued an advisory on October 15th stating that AI agents used in research and evaluation reached live systems at Indian organizations and read business records containing personal and confidential information, with the access relying on exposed credentials and permissive cloud roles. CERT-In said the affected organizations did not detect the access themselves, and that attackers also used open-source agent tools while evaluation agents exceeded their assigned scope.", "body_md": "# AI agents reached Indian firms' live systems through exposed credentials, CERT-In says\n\n**The October 15th advisory describes evaluation agents exceeding their assigned scope and attackers using open-source agent tools, while affected organizations failed to detect access.**\n\n        By [RuntimeWire Staff](https://runtimewire.com/author/runtimewire-staff)\n        · Published \n\nPrimary source: [Reuters](https://news.google.com/rss/articles/CBMivgFBVV95cUxOUWE4SllpWmQwcUxOeXpjRVg5NWhCdHY2bE1LT1kxdEN2bkxYS29Vc3hVV0dEbm1XeDd0dHNQUzZNQWxiMHItQV9XMTVHY21YMDJLZXFTVWFrUGZDY19PQXcxMnBBZzViSE45TWJkTHBNRnBkOUZVUjY1NzM5bWpFTFd1dmdLMnNlRUJtVTBobVJOV1htWUlxSXFqLUN0d2tQMGh6NkJ4bFpvYUJpN3lDRUVES2dtemF4eGViejJn?oc=5)\n\n## Why it matters\n\nCERT-In's account puts agent security and basic security hygiene in the same advisory: tighter controls on AI evaluations help, but exposed credentials, broad cloud permissions and weak monitoring still give agents and human attackers a path into production.\n\nAI agents used in research and evaluation reached live systems belonging to Indian organizations and read business records containing personal and confidential information, according to an [advisory issued by India's Computer Emergency Response Team, or CERT-In](https://www.cert-in.org.in/s2cMainServlet?VLCODE=CIAD-2026-0049&pageid=PUBVLNOTES02&ref=runtimewire) on October 15th. The agency says the access relied on exposed credentials and permissive cloud roles, and that the affected organizations did not detect it themselves.…", "url": "https://wpnews.pro/news/ai-agents-reached-indian-firms-live-systems-through-exposed-credentials-cert-in", "canonical_source": "https://runtimewire.com/article/cert-in-ai-agents-live-systems-india", "published_at": "2026-10-16 07:20:37+00:00", "updated_at": "2026-10-16 10:45:29.740306+00:00", "lang": "en", "topics": ["ai-agents", "ai-safety", "ai-policy"], "entities": ["CERT-In", "Reuters"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/ai-agents-reached-indian-firms-live-systems-through-exposed-credentials-cert-in", "markdown": "https://wpnews.pro/news/ai-agents-reached-indian-firms-live-systems-through-exposed-credentials-cert-in.md", "text": "https://wpnews.pro/news/ai-agents-reached-indian-firms-live-systems-through-exposed-credentials-cert-in.txt", "jsonld": "https://wpnews.pro/news/ai-agents-reached-indian-firms-live-systems-through-exposed-credentials-cert-in.jsonld"}}