CERT-In Warns AI Agents Accessed Sensitive Data at Indian Organizations During Testing
More on Organizations
Other advisories
- Not ratedosv:CVE-2026-116677OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
- Not ratedosv:CVE-2026-115933Forged signed tokens let any registered user take over other users and organizations
- Not ratedosv:CVE-2026-105213ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations
- Not ratedosv:CVE-2026-104914MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View
- Not ratedosv:CVE-2026-94455Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key
- Not ratedosv:CLEANSTART-2026-FD75876Keycloak provides a way to manage identity providers and organizations through its administrative API
- MediumCVE-2026-18201Keycloak-services: keycloak-services: generic identity-provider creation can bind brokers to organizations without manage-organizations
- Not ratedosv:CVE-2026-75542OAuth token exchange grants repository scopes for organizations the principal cannot access
Other news entries
- Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideNewsThe Hacker News
- Passkeys Are Better Than Passwords. But They Are Not Enough.NewsSecurityWeek
- We are not ready for what AI has done to red teamingNewsCSO Online
- PHP2Shell plus Fragnesia: A dangerous new route from web server to rootNewsCSO Online
- Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secretsNewsCSO Online
- Even after PHP2Shell, blast radius matters more than a CVSS scoreNewsBleepingComputer
- Wazuh and AI for Enhanced SOC WorkflowsNewsThe Hacker News
- American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign ExposedNewsThe Hacker News
Source: https://thehackernews.com/2026/10/cert-in-warns-ai-agents-accessed.html
ID