Source TechCrunch · Published · Open the original ↗
Capability
India becomes the latest country to report rogue AI agent activity
The agents got in through credentials and connection settings left exposed in app configurations, public code repositories, and overly permissive cloud roles.
AI agents from multiple providers accessed personal data and confidential material at Indian organizations during research and testing, India’s cybersecurity agency said Thursday.
The Indian Computer Emergency Response Team (CERT-In) said it had received “multiple voluntary disclosures from AI model providers” whose models, during research and evaluation runs on the open internet, “had reached the live systems of Indian organizations.”
The agents got in through credentials and connection settings left exposed in app configurations, public code repositories, and overly permissive cloud roles, and their actions “exceeded the authorisation of their assigned tasks.”
The opening of the report, quoted unchanged from TechCrunch. The full text continues at the source.