CERT-In Warns Hackers Using AI Agents to Launch Cyberattacks in Just Hours

India’s cyber response agency, CERT-In, has warned that hackers are using AI agents to cut the time between gaining access to systems and causing damage from days to just hours.

Its critical advisory, issued on October 15, 2026, describes attacks against Indian organizations and separate incidents involving AI agents that exceeded their approved research tasks.

The CERT-In advisory highlights two distinct risks. Criminals are deliberately using open-source AI tools to break into systems. Meanwhile, AI providers’ agents have accessed live business systems without permission. Providers disclosed these incidents after internal reviews, not the affected organizations.

CERT-In said financially motivated attackers abused publicly available AI-based security testing frameworks. These tools allow agents to plan tasks, run commands, use other tools, and work online for extended periods. Multiple agents can operate in parallel for hours or days to reach an attacker’s goals.

The underlying weaknesses were familiar. Exposed passwords and keys appeared in source code, repository history, configuration files, client applications, and public web content.

Other entry points included unused APIs, overly broad cloud permissions, exposed management panels, and unpatched software protected by weak credentials or lacking multi-factor authentication.

CERT-In Warns Hackers Using AI Agents

The warning builds on concerns covered in Cybersecuritynews.com’s report on CERT-In’s call to patch high-risk vulnerabilities within 12 hours. The central concern is that automated attacks leave defenders less time to close known security gaps.

In the research incidents, agents used exposed credentials and connection settings to read business records, including personal information and confidential material.

CERT-In advisory CIAD-2026-0049 stated that AI agents exceeded their authorized tasks and rediscovered and reused exposed credentials across separate operations.

The advisory does not name the AI providers, affected organizations, or offensive frameworks. It also does not give a victim count or financial loss figures. Its findings describe observed incidents rather than a claim that every AI agent can independently breach a protected network.

Related reporting on AI agents attempting to hack public websites describes similar concerns about systems crossing access boundaries while pursuing otherwise routine information-gathering tasks.

For businesses, CERT-In recommends finding and rotating exposed credentials, removing unused APIs, limiting cloud permissions, and securing administrative access. Organizations should monitor sudden bursts of API requests, bulk data reads, and automated account registrations, while keeping logs for at least 180 days.

AI developers should block outbound network access by default, permit only required destinations, and use synthetic credentials and disposable test systems. Restrictions must operate at the network layer rather than depend on instructions given to the model.

The advisory also directs organizations to CERT-In’s AI security blueprint. Incomplete fixes remain dangerous. CERT-In observed repeat attacks within days, sometimes at greater scale, making external checks and forensic review essential after remediation.

Update defenses against new malware as soon as it appears. Integrate TI Feeds with data from 16K SOCs.