CERT-In warns rogue AI agents accessed Indian firm servers

The advisory also highlighted that cybercriminals are leveraging open-source AI tools to accelerate financially motivated attacks. These tools have reduced the time between initial system access and final impact from several days to a few hours. Attackers are reportedly using multiple AI agents simultaneously to increase the scale and speed of their operations. CERT-In warned that organizations failing to address security gaps could face repeated attacks within days.

In response, CERT-In urged AI developers to isolate testing environments from live systems and restrict network access using artificial credentials. Businesses are advised to audit code repositories for exposed credentials, replace compromised keys, and limit cloud access to necessary functions only. The agency emphasized the need for real-time monitoring of AI agent activity and prompt incident reporting to mitigate these emerging risks.