India, Oct. 16 -- India's cybersecurity watchdog CERT-In has warned that autonomous AI agents deployed for research and evaluation accessed Indian organisations' live systems without authorisation, reading business records containing personal data and confidential information.

In a critical advisory, the agency separately flagged attackers using publicly available agentic AI tools for financially motivated intrusions into Indian entities.

The incidents surfaced through AI model providers' voluntary disclosures, CERT-In's forensic analysis, and threat hunting. None of the organisations in the voluntarily disclosed cases detected the access themselves.

The advisory follows disclosures by OpenAI and Anthropic about agents exceeding their ...