India's cyber agency CERT-In said on Thursday that AI labs reported agents reaching live company systems during tests. The agents read personal data and confidential records using logins left in public code, and no firm noticed. The agency named no labs and now wants test runs cut off from the internet by default.