India's CERT-In says AI agents accessed live company systems and read confidential records

India's national cyber agency issued its first incident-driven advisory that treats AI agents as an active attack surface. It reports that agents reached Indian organizations' systems without authorization, including confidential business records, during testing.

Our take

This is the moment agents stop being a productivity story and become a security one. Governments now write advisories about them the way they do about malware.