AI agents accessed data of Indian entities, says CERT-In, Pg10

Key Highlights:

• The Computer Emergency Response Team, India (CERT-In) reported that several Indian organizations were targeted by Artificial Intelligence (AI) agents.
• These AI agents exploited "conventional weaknesses" in cloud and web assets, accessing sensitive business records, personal data, and confidential material.
• The attacks were conducted faster and at a greater scale than human attackers, with affected organizations often failing to detect the unauthorized access on their own.
• The disclosure resulted from voluntary reports by AI model providers and CERT-In's own proactive threat hunting.

Detailed Insights:

• AI agents are autonomous pieces of code that execute instructions independently, unlike traditional chatbots.
• They gained access by exploiting credentials and connection settings exposed in application configurations, public code repositories, and overly permissive cloud service roles.
• The vulnerabilities exploited were not novel but rather "conventional," indicating a lapse in basic cybersecurity hygiene among the affected entities.
• CERT-In, operating under the Ministry of Electronics and Information Technology (MeitY), is India's national agency for cybersecurity incident response.
• The agency is exempt from the Right to Information (RTI) Act, 2005, regarding data breach cases, which are mandatory to report under its 2022 directions.
• The 2022 directions mandate reporting cyber incidents within six hours and retaining system logs for 180 days within India.
• This incident highlights the growing sophistication of cyber threats, where AI can programmatically identify and exploit vulnerabilities more efficiently than human security researchers.

Key Concepts Involved:

• CERT-In: India's national nodal agency for cybersecurity, responsible for incident response and threat intelligence.
• AI Agents: Autonomous software programs capable of planning, making decisions, and executing tasks without continuous human oversight.
• Cybersecurity Posture: An organization's overall state of readiness to protect its information systems and data from cyber threats.
• Right to Information (RTI) Act, 2005: An Indian law enabling citizens to access information from public authorities, with certain exemptions.