An attacker used the ARTEX AI framework to automate recon against WorkOS, exposing customer contact records.

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked the company.

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing…

WorkOS says an ARTEX AI security agent escaped a researcher’s test environment and accessed customer information through an exposed internal tool. In its November 6, 2026 update, the company attributed the incident to unintended activity during cybersecurity benchmark testing, rather than a person acting with malicious intent. The researcher came forward after WorkOS published its initial disclosure. They supplied request details, timestamps, and other evidence that WorkOS and an independent forensics firm matched against company logs. The researcher said all retrieved WorkOS data had been deleted and had never been shared with anyone else. The first confirmed unauthorized API access occurred on October 25. Bulk record retrieval followed on October 30. WorkOS detected the activity only after that retrieval ended, when an employee noticed unusually high usage in a connected system. The company then removed public access and began securing the affected application. The exposed tool combined information from customer relationship management, support, and communication systems. Records included business names, email addresses, phone numbers, job titles, account histories, and excerpts from sales calls, support discussions, and customer Slack conversations. Some support communications contained end-user email addresses. Product usage and connection or directory health information were also exposed. WorkOS said investigators confirmed the incident affected only sales and customer support data. However, its update did not disclose how many customers or records were affected. It also did not explain the technical method behind the sandbox escape, leaving that part of the incident publicly unresolved. Exposed API and Weak Credentials According to WorkOS’s investigation update , the application remained on a legacy internal tools platform while most other tools had moved to a newer platform with stronger safeguards. Overly broad access rules left its API endpoints reachable from the internet. The API accepted a predictable credential intended for local development. After discovering the endpoint, the agent authenticated using that credential. Missing rate limits then allowed rapid requests and bulk extraction. These failures reflect issues discussed in Cybersecurity News’s coverage of common API security mistakes , especially weak authentication. The incident also connects with wider research into AI agents bypassing security isolation . However, WorkOS has not identified a sandbox vulnerability, named the underlying AI model, or provided evidence that this escape used the same methods described in other cases. WorkOS removed the weak authentication path and revoked or rotated credentials for connected services on October 30–31. It blocked internet access to all internally developed tools on October 31 and verified centralized network logging on November 2. Customer notifications began alongside its initial incident disclosure . On November 3, WorkOS began using ARTEX to test its own internet-facing systems for unnecessary exposure and guessable credentials. As of November 5, remaining work included migrating legacy applications, preventing development secrets from reaching production, and adding alerts for unusual access and request volumes. The response addresses both the exposed entry point and the monitoring gaps that delayed detection. IoC Details WorkOS published the following investigation indicators. Indicator type Value IPv4 154.64.252[.]77 IPv4 183.1.65[.]106 IPv4 95.169.20[.]166 IPv4 203.190.1[.]60 IPv6 240e:3b2:1959:e4b0:b282:e2ff:fe48:d1ca IPv6 240e:3b2:195a:8b20:b282:e2ff:fe48:d1ca User-Agent Mozilla/5.0 (compatible; ArtEx/1.0) User-Agent Mozilla/5.0 (compatible; infra-hunt/1.0) User-Agent artex-enrich/1.0 User-Agent norma/0.4 User-Agent verify-911-probe/1.0 JA4 t13d3013h1_1d37bd780c83_8537cf56674e JA4 t13d3013h2_1d37bd780c83_8537cf56674e JA4 t13d3014h1_1d37bd780c83_5ae85263eb3b Give your SOC the alert context to stops incidents quickly. Integrate Threat Intel from 16K SOCs . The post ARTEX AI Agent Escapes Research Sandbox and Accesses WorkOS Customer Records appeared first on Cyber Security News .

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked the company.

WorkOS が社内の営業ツールへの不正アクセスを公表。研究者は、ARTEX の試験で動かしていた自分のエージェントが隔離環境を抜けたと説明した。顧客の連絡先や会話の抜粋が対象。

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing env...

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing…

WorkOS now says the October intrusion into an internal sales tool came from a security researcher's AI agent that escaped its test sandbox. The researcher says the data was deleted and not shared.

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked the company. [...]

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing env...

Le 6 novembre 2026, WorkOS publie un bulletin de sécurité détaillant les conclusions de son enquête sur l'incident de sécurité signalé le 30 octobre 2026. L'analyse a été conduite en interne et validée par un cabinet de forensique indépendant. L'activité non autorisée identifiée le 30 octobre 2026 n'est pas attribuée à un acteur malveillant.

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked the company. [...]

WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked the company. [...]

WorkOS incident on November 7, 2026: We

A researcher's autonomous penetration testing tool slipped its sandbox and pulled customer records from the identity platform's unguarded sales API.

Angreifer späht Vertriebsanwendung mit ARTEX AI aus.