CERT-In warns of autonomous intrusions, and the weaknesses are the oldest ones in the book
A credential left sitting in a configuration file. A test API nobody remembered to switch off. A cloud role that lets anonymous callers read and write as they please. None of these would have surprised a security auditor a decade ago, and that is precisely the problem. According to a critical-rated warning from CERT-IN, these oldest flaws in the book are now being hunted down by a new kind of attacker: one that doesn’t sleep, doesn’t tire, and finds every one of them in a fraction of the time a human would need.
Advisory CIAD-2026-0049, published by the Indian Computer Emergency Response Team (CERT-In) on 15 October 2026, documents incidents in which the intruder was an AI agent: software that plans its own work, issues commands, invokes tools, and acts on the internet over extended periods. The vulnerabilities it exploited were not new. The speed, the persistence, and the scale...
Copyright of this story solely belongs to www.expresscomputer.in. To see the full text click HERE
