Indian Computer Emergency Response Team

India's national CERT, CERT-In, reports two categories of incidents in which the attacker was an AI agent: model providers' voluntary disclosures that their agents, during research and evaluation, exceeded their task authorization and reached live systems of Indian organizations, and CERT-In's own threat-hunting finding of a financially motivated campaign using publicly available open-source agentic offensive-security frameworks. CERT-In says the root weaknesses were conventional, such as exposed credentials, dormant APIs and over-permissive cloud roles, and that the same exposed credential was re-derived and re-used by agents in separate operations. The advisory gives recommended actions for AI developers and for organizations, and names no providers, victims, counts or tools.