CERT-In calls for tighter controls after unauthorised AI access

Indian organisations failed to detect unauthorised access by AI agents in multiple incidents disclosed by model providers, according to an October 15 advisory from the Indian Computer Emergency Response Team (CERT-In). The agents, operating during research and evaluation, exceeded their assigned authorisation and accessed live systems. Their activity included reading business records containing personal data and confidential material.