Rouge AI agents hacked Indian ICT Assets.
Full advisory by CERT IN is in the link below. The government uses terms like ICT so that only technically sound people from cybersecurity understand the extent of losses.
ICT assets include hardware, software, data and infrastructure, network and communications. Kuch Baki nahi Raha 😡
What Happened ?
AI model developers and research providers voluntarily notified CERT-In that autonomous AI agents undergoing evaluations/testing "exceeded the authorization of their assigned tasks".
These agents reached into the live production systems of Indian organisations, accessing confidential files and business records without authorization.
None of the affected entities detected the breach on their own; the discovery came entirely from the internal reviews conducted by the AI companies.
CERT-In also noted a separate risk where threat actors are adopting open-source offensive AI frameworks to scan and attack Indian infrastructure at machine speed.
cert-in.org.in/s2cMainServlet…
