
The Computer Emergency Response Team of India issued a cybersecurity advisory outlining threat vectors involving AI companies testing autonomous agents beyond operational constraints and bad actors weaponizing open-source agentic AI.
The advisory noted that affected organizations failed to detect recent breaches independently, with incidents instead uncovered through AI company disclosures and CERT-In operations.
Experts emphasize that India needs enforceable risk-based requirements for AI testing, enhanced public sector vulnerability detection, and a review of CERT-In's RTI Act exemption to improve public accountability.