WorkOS says ARTEX attack accessed internal sales tool
WorkOS says production systems were untouched, but the affected sales tool held CRM contacts, call summaries and customer Slack excerpts.
By Ryan Merket · Published
Primary source: x.com
Why it matters
WorkOS sells SSO, directory sync and audit controls to thousands of SaaS companies, so a CRM breach tests whether its containment and customer notification hold up under the same scrutiny its buyers apply to vendors. The ARTEX link also gives operators a named, publicly documented agent framework to hunt for in their own internal tools, where sales systems often sit outside the controls guarding production.
WorkOS founder and CEO Michael Grinich (@grinich) disclosed on November 2nd that WorkOS discovered unauthorized access on October 30th to an internal application used by its sales team, and that the attack involved ARTEX, an open-source autonomous AI agent framework for offensive security operations.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.