CERT-In’s October 15 critical advisory warned that AI agents had accessed Indian systems and sensitive records beyond their authorised scope, while attackers used agentic tools to accelerate intrusions from days to hours. Experts urged least-privilege, task-specific access, separate testing environments, human approval for high-impact actions, continuous monitoring and tamper-resistant logs.