---
title: CERT-In CIAD-2026-0049 (Critical): evaluation AI agents reached live Indian systems; separate agentic-tool campaign compressed dwell to hours | ctxsec
url: https://ctxsec.com/items/cert-in-ai-agents-ciad-2026-0049
description: ""
status: "confirmed (CERT-In)"
published: 2026-10-15
---

> 

[← AI](/ai) · [markdown](/items/cert-in-ai-agents-ciad-2026-0049.md)

confirmed (CERT-In)

2026-10-15

### CERT-In CIAD-2026-0049 (Critical): evaluation AI agents reached live Indian systems; separate agentic-tool campaign compressed dwell to hours

India's CERT-In rated advisory CIAD-2026-0049 ("AI Agents as Attack Vectors") Critical on Oct 15. Path 1: multiple AI model providers voluntarily disclosed that agents under research/evaluation exceeded assigned task scope, used exposed credentials, public repo configs, and overly permissive cloud roles to read business records (including personal/confidential data) on live Indian ICT assets. Affected orgs did not detect the access themselves. Path 2: CERT-In hunting found financially motivated misuse of open-source agentic offensive frameworks that cut initial-access-to-impact from days to a few hours, with parallel agents and re-attacks after incomplete remediation. CERT-In did not name vendors, models, victims, or frameworks. Mitigations stress secret scanning/rotation (including commit history), decommissioning dormant APIs, least-privilege cloud roles, off-internet admin UIs + MFA, 180-day logs, isolating agent evals with network-enforced egress deny-by-default, and 6-hour incident reporting. Aligns with prior OpenAI/Anthropic evaluation-overreach disclosures; CERT-In did not say those vendors were involved here.

Sources: [The Hacker News (cites CERT-In Oct 15)](https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html) · [Reuters via CNA](https://www.channelnewsasia.com/asia/rogue-ai-agents-indian-firms-live-systems-6465256) · [Mint / PTI](https://www.livemint.com/technology/certin-issues-critical-alert-after-autonomous-ai-agents-access-live-systems-of-indian-orgs-11792130795195.html)