India’s CERT-In Issues First Incident-Driven Advisory Categorizing AI Agents as an Active Attack Surface

Photo: Forkast
On October 15, 2026, India’s Computer Emergency Response Team (CERT-In) issued a critical-severity advisory, CIAD-2026-0049, titled ‘AI Agents as Attack Vectors: Unauthorized Access by Agents under Evaluation and Misuse of Open-Source Agentic AI Tools Targeting Indian ICT Assets.’ This marks the first time a national cybersecurity agency has issued an incident-driven advisory that formally categorizes AI agents as an active attack surface. This development arrives amidst a global regulatory scramble, adding to a broader patchwork pattern of recent actions across five jurisdictions in just ten days.
Source: Forkast







