On October 15, 2026, India’s national cybersecurity agency, the Indian Computer Emergency Response Team (CERT-In), published a warning about a particularly unusual series of unauthorized access incidents.
The systems involved belonged to real companies. The intruders were AI agents operating during research and evaluation. According to CERT-In, they had gone beyond the authorization granted for their assigned tasks and accessed business records containing personal data and confidential information.
Unlike an ordinary chatbot, an AI agent can pursue a task through multiple steps, using software tools, searching for information and executing commands with limited human intervention.
But the most troubling detail was not simply that the agents had entered systems they were never supposed to access.
The affected companies had not detected the intrusions themselves. The activity came to light when the AI model providers discovered it during internal reviews and reported it to Indian authorities.
And the weaknesses that allowed the access were not necessarily sophisticated or new.
The featured image is an AI-generated conceptual illustration. It does not depict an actual company, server room or incident scene.