WorkOS discloses breach via the AI pentesting tool ARTEX as the wave of attacks on AI platforms continues
Identity platform WorkOS announced on November 4 that on October 30 attackers compromised an internal application used by its sales team, gaining access to customer contact details, communication content, and information about how customers use WorkOS products. According to SecurityWeek, the attack reportedly used ARTEX, the open-source AI-agent-coordinated penetration testing tool already linked to breaches at South Korean banks and the ConnectWise supply-chain attack. WorkOS joins a broader wave that includes Northflank and Trigger.dev, which disclosed their own incidents in recent weeks, with attackers mainly targeting stored AI provider access keys to resell or exploit themselves. Security firm Wiz says at least a dozen AI-enabled development platforms have been hit in the past month. For a business that stores AI API keys inside third-party platforms, the case shows that the same AI-driven pentesting tool is now hitting everyday software companies, not just state-level targets.
Sources
This summary was written automatically with AI from the public sources listed above and checked by an independent AI reviewer before publication. For full details, read the original source.