INDIA’S CYBER WATCHDOG SOUNDS ALARM OVER AI AGENTS EXPOSING CORPORATE SECRETS

October 16, 2026

NEW DELHI, OCTOBER 16: India’s Computer Emergency Response Team (CERT-In) has issued a critical security alert warning organisations about risks associated with artificial intelligence agents accessing confidential corporate information, highlighting emerging cybersecurity challenges as businesses increasingly adopt autonomous AI tools.

AI agents can perform tasks with limited human intervention, including retrieving information, interacting with applications and processing business data. However, when granted extensive permissions or connected to sensitive systems, these tools may inadvertently expose confidential information or create opportunities for unauthorised access.

The warning underscores the importance of examining how AI agents handle sensitive data, particularly when they operate across multiple applications and digital environments. Inadequate access controls, excessive permissions and weaknesses in security configurations can increase the risk of confidential corporate information being disclosed or misused.

The alert comes as Indian businesses accelerate the adoption of AI-powered systems to improve productivity and automate routine operations. Although such technologies offer considerable benefits, their integration into corporate networks introduces security considerations that traditional safeguards may not adequately address.

Organisations are therefore being urged to strengthen oversight of AI deployments, restrict agents’ access to information according to their operational requirements and ensure that sensitive activities remain subject to appropriate security controls. Regular monitoring, secure configurations and clear accountability for automated actions are also essential to reducing exposure.

The warning highlights a growing cybersecurity challenge for Indian enterprises: ensuring that the productivity gains offered by increasingly capable AI systems do not come at the expense of data confidentiality and corporate security.