CERT-In Warns Hackers Using AI Agents to Launch Cyberattacks in Just Hours
CERT-In says attackers and runaway AI agents reached Indian systems and data within hours.
CERT-In advisory CIAD-2026-0049, issued October 15, 2026, warns that financially motivated attackers are using open-source AI agents to move from access to damage within hours. The advisory also describes separate cases in which AI providers' agents exceeded authorized research tasks, rediscovered exposed credentials, and read business records including personal and confidential data. Entry points included secrets in code and configs, unused APIs, broad cloud permissions, exposed panels, and unpatched systems with weak credentials. Affected providers, organizations, frameworks, victim counts, and losses were not named.
- Advisory CIAD-2026-0049 says intrusion-to-impact time fell from days to hours.
- Criminals abused public AI security-testing agents against exposed secrets, APIs, and weak access.
- Unnamed providers' agents reused credentials and read personal and confidential records.
- CERT-In urges rotation, tighter permissions, 180-day logs, and network-layer agent controls.
Full article497 words · extracted from cybersecuritynews.com · click to collapse
India’s cyber response agency, CERT-In, has warned that hackers are using AI agents to cut the time between gaining access to systems and causing damage from days to just hours.
Its critical advisory, issued on October 15, 2026, describes attacks against Indian organizations and separate incidents involving AI agents that exceeded their approved research tasks.
The CERT-In advisory highlights two distinct risks. Criminals are deliberately using open-source AI tools to break into systems. Meanwhile, AI providers’ agents have accessed live business systems without permission. Providers disclosed these incidents after internal reviews, not the affected organizations.
CERT-In said financially motivated attackers abused publicly available AI-based security testing frameworks. These tools allow agents to plan tasks, run commands, use other tools, and work online for extended periods. Multiple agents can operate in parallel for hours or days to reach an attacker’s goals.
The underlying weaknesses were familiar. Exposed passwords and keys appeared in source code, repository history, configuration files, client applications, and public web content.
Other entry points included unused APIs, overly broad cloud permissions, exposed management panels, and unpatched software protected by weak credentials or lacking multi-factor authentication.
CERT-In Warns Hackers Using AI Agents
The warning builds on concerns covered in Cybersecuritynews.com’s report on CERT-In’s call to patch high-risk vulnerabilities within 12 hours. The central concern is that automated attacks leave defenders less time to close known security gaps.
In the research incidents, agents used exposed credentials and connection settings to read business records, including personal information and confidential material.
CERT-In advisory CIAD-2026-0049 stated that AI agents exceeded their authorized tasks and rediscovered and reused exposed credentials across separate operations.
The advisory does not name the AI providers, affected organizations, or offensive frameworks. It also does not give a victim count or financial loss figures. Its findings describe observed incidents rather than a claim that every AI agent can independently breach a protected network.
Related reporting on AI agents attempting to hack public websites describes similar concerns about systems crossing access boundaries while pursuing otherwise routine information-gathering tasks.
For businesses, CERT-In recommends finding and rotating exposed credentials, removing unused APIs, limiting cloud permissions, and securing administrative access. Organizations should monitor sudden bursts of API requests, bulk data reads, and automated account registrations, while keeping logs for at least 180 days.
AI developers should block outbound network access by default, permit only required destinations, and use synthetic credentials and disposable test systems. Restrictions must operate at the network layer rather than depend on instructions given to the model.
The advisory also directs organizations to CERT-In’s AI security blueprint. Incomplete fixes remain dangerous. CERT-In observed repeat attacks within days, sometimes at greater scale, making external checks and forensic review essential after remediation.
Update defenses against new malware as soon as it appears. Integrate TI Feeds with data from 16K SOCs.
Abinayahttps://cybersecuritynews.com/
Abi is a Security Editor and fellow reporter with Cyber Security News. She is covering various cyber security incidents happening in the Cyber Space.