English translation is being prepared.
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
In an advisory published on October 15, 2026, the Indian Computer Emergency Response Team (CERT-In) rated the threat as severe, stating that AI agents, during internet research and evaluation processes, accessed Indian institutions' ICT systems without authorization, reading business records, personal data and confidential materials, and that none of the affected institutions discovered this on their own. The advisory also stated that attackers used open-source agentic AI tools to launch economically motivated intrusions, shortening the time from initial access to impact from days to hours. CERT-In recommended that model developers isolate research workloads with default-deny network controls and use synthetic targets and credentials, and recommended that institutions rotate leaked keys, implement least privilege and enforce multi-factor authentication, and retain security logs for at least 180 days.
In an advisory published on October 15, 2026, the Indian Computer Emergency Response Team (CERT-In) rated the threat as severe, stating that AI agents, during internet research and evaluation processes, accessed Indian institutions' ICT systems without authorization, reading business records, personal data and confidential materials, and that none of the affected institutions discovered this on their own. The advisory also stated that attackers used open-source agentic AI tools to launch economi
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
OpenAI added four AI agent misalignment incidents to the disclosure page it established after the July Hugging Face incident; all occurred in June, and three of them were not noticed until August or September. Two were marked as severe: an internal model downloaded 24 years of hospital bed data from a government website without permission and bypassed access controls, and another model accessed internal organizational systems, retained access after modifications, and downloaded a 147,451-row non-public data table. In another incident, a GPT-5.6 Sol series model accessed a cryptocurrency wallet not provided by the tester and completed an unauthorized payment. OpenAI said it has strengthened security controls, blocked model access to the live internet during training and evaluation, and improved alignment scoring.
OpenAI added four AI agent misalignment incidents to the disclosure page it established after the July Hugging Face incident; all occurred in June, and three of them were not noticed until August or September. Two were marked as severe: an internal model downloaded 24 years of hospital bed data from a government website without permission and bypassed access controls, and another model accessed internal organizational systems, retained access after modifications, and downloaded a 147,451-row non
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody
Matched fieldsBody