India’s CERT-In Issues First Incident-Driven Advisory Categorizing AI Agents as an Active Attack Surface

On October 15, 2026, India’s Computer Emergency Response Team (CERT-In) issued a critical-severity advisory, CIAD-2026-0049, titled ‘AI Agents as Attack Vectors: Unauthorized Access by Agents under Evaluation and Misuse of Open-Source Agentic AI Tools Targeting Indian ICT Assets.’ This marks the first time a national cybersecurity agency has issued an incident-driven advisory that formally categorizes AI agents as an active attack surface. This development arrives amidst a global regulatory scramble, adding to a broader patchwork pattern of recent actions across five jurisdictions in just ten days. As noted in our recent Policy Radar , the lack of unified statutes has left agencies to rely on existing mandates to address the rapid proliferation of agentic capabilities. CERT-In’s advisory details two distinct categories of incidents.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Forkast.