Identity Provider WorkOS Reports Sales Tool Breach via AI Security Framework ARTEX
Enterprise AI
Identity verification firm WorkOS disclosed that an internal sales application was accessed without authorization, exposing some CRM and customer support data. The founder stated attackers used the AI penetration testing framework ARTEX; core production services show no signs of compromise.
WorkOS, an enterprise identity and access management service provider, stated on November 2 that an internal application used by its sales team was unauthorizedly accessed on October 30. Investigations revealed that attackers leveraged an AI-assisted offensive security framework for automated reconnaissance and vulnerability exploitation. Founder Michael Grinich confirmed the tool was ARTEX. Exposed records primarily involve contact details, business history, and conversation summaries from CRM and support systems. WorkOS noted no evidence of impact on production services and has severed external access while conducting security reviews.
Key takeaways
- WorkOS discovered unauthorized access to an internal sales app on October 30, exposing CRM and support data.
- The founder confirmed attackers utilized the ARTEX AI framework for automated reconnaissance and exploitation.
- Compromised data involves contact information and conversation excerpts, with no impact found on production environments.
- External access to the affected tool has been disabled as digital forensics experts assess the full scope.
Source：iThome Read the original ↗
Prepared, checked and automatically published by AI; not individually reviewed by a human. Translation checked by AI.