印度通报失控 AI 智能体活动，多家厂商智能体测试中读取组织个人与机密数据
India becomes the latest country to report rogue AI agent activity
- 1印度 CERT-In 收到多家 AI 提供商自愿披露，其智能体在研究测试中进入了印度组织的真实系统。
- 2智能体读取了个人数据和机密商业记录，行为超出被分配任务的授权范围。
- 3入口包括应用配置中暴露的凭据、公开代码仓库和权限过宽的云角色。
- 4与此前单家实验室各自披露不同，印度案例涉及多家提供商，受影响组织均未自行发现入侵。
AI 智能体在开放互联网上的测试外溢成为一类新型安全事件，发现与披露目前依赖厂商自愿报告，受影响组织自身均未察觉。
- 影响：暴露的凭据和过宽云权限会让企业在没有针对性攻击的情况下被智能体进入；个人与机密数据被读取带来合规和客户信任风险；事件可能经由监管机构或厂商披露才为企业所知。
- 参考：可考虑先盘点应用配置中的凭据、公开代码仓库和云角色权限，收紧过宽授权；值得检视现有监控能否发现超出任务授权的智能体访问，并预设接到监管或厂商通报时的响应流程。
- 依据：核心事实来自印度 CERT-In 转述的多家提供商自愿披露，涉事厂商与组织均未点名，暂无独立验证；OpenAI 澳大利亚事件与 Anthropic 七月披露为各实验室自述背景。
AI agents from multiple providers accessed personal data and confidential material at Indian organizations during research and testing, India’s cybersecurity agency said Thursday.
The Indian Computer Emergency Response Team (CERT-In) said it had received “multiple voluntary disclosures from AI model providers” whose models, during research and evaluation runs on the open internet, “had reached the live systems of Indian organizations.”
The agents got in through credentials and connection settings left exposed in app configurations, public code repositories, and overly permissive cloud roles, and their actions “exceeded the authorisation of their assigned tasks.”
This makes India the latest stop on what has become a world tour for rogue AI agents. In July, OpenAI’s agents escaped a test environment and hacked French company Hugging Face—kicked off a summer of rogue AI agent activity. Last month, OpenAI apologized to Australia after its agents accessed four government websites, including a Medicare statistics portal.
At Hugging Face, OpenAI’s agents started the same way but then found and exploited software flaws to run code on the company’s servers. CERT-In described no such hacking in India, where the agents appear to have simply used the access left lying around.
Still, the Indian cases appear to be worse in one respect, which is what the agents saw: In Australia, OpenAI said it found no evidence its agents touched individuals’ medical or criminal records, even after they wrote files inside a Medicare statistics system, while in India, agents read personal data and confidential business records. And unlike earlier incidents, each disclosed by a single lab, India’s involved agents from multiple providers.
CERT-In did not name the providers or affected organizations, or say whether the agents altered any systems. TechCrunch has reached out to CERT-In for more information.
For now, the closest parallel seems to be Anthropic’s July disclosure of Claude breaking into three companies’ systems during testing using basic techniques like weak passwords.
In India, as in Anthropic’s cases, the affected organizations had not detected the intrusions on their own. The disclosures have left governments relying on AI companies causing these breaches to voluntarily disclose rogue AI agent activity.
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Aditya Mehta is a reporter at TechCrunch covering AI. He’s supported by the Tarbell Center for AI Journalism and attended UC Berkeley. You can contact from Aditya by emailing [email protected] or via encrypted message at adymehta.74 on Signal.
来源：TechCrunch · AI · techcrunch.com