WorkOS Internal Sales App Breached in Attack Linked to ARTEX AI Framework

What happened

WorkOS is a developer platform company offering APIs, SDKs and tools for enterprise authentication, single sign-on, user management and identity management. According to BleepingComputer, citing the company's website, at least 3,000 companies use its services, including OpenAI, Anthropic, Cursor, Perplexity, Snowflake and Plaid.

In its incident alert, WorkOS said that on October 30, 2026, it identified unauthorized access to an internal application used by its sales team. After detecting the intrusion, the company disabled external access to the affected application, reviewed access controls on internal tools, and contracted an independent forensics and incident response firm to track the unauthorized activity and determine its full impact. It said it would notify affected customers directly and warned users to stay vigilant against phishing or social engineering attempts using the exposed information.

The company's announcement said the attacker used an AI offensive security framework to automate reconnaissance and exploitation attempts. Founder Michael Grinich added that the investigating team identified user agents such as artex-enrich/1.0 and norma/0.4 in web requests from the threat actor, and said the framework was the ARTEX AI penetration-testing suite. He said the incident is now fully contained and more information will be shared after the investigation completes. The reporting did not attribute the WorkOS attacker.

Key facts

1. Discovery and disclosure: intrusion identified on October 30, 2026, disclosed in a BleepingComputer report on November 3, 2026
2. Data accessed: business contact details, including names, email addresses, job titles and company affiliations from CRM systems; customer account histories, including product usage and connection or directory health; customer communication summaries and excerpts, including sales calls, support discussions and customer Slack conversations; business account and relationship information
3. Scope said to be unaffected: according to the company, no WorkOS app data or production services were accessed or affected
4. Tool, as described: the company announcement said the attacker used an AI-powered offensive security framework; the founder said the framework was the ARTEX AI penetration-testing suite
5. ARTEX background: the platform was released earlier in 2026 by Chinese developers as an open-source project, later became private, but several forks of its code remain available
6. Wider campaign: according to CrowdStrike, as reported by BleepingComputer, an operation tracked as Vapor Panda targeted more than 200 organizations across 14 countries from October 17, compromising at least nine and carrying out password spraying and credential scanning against at least 12 other high-value targets
7. Another case: the Dutch Institute for Vulnerability Disclosure (DIVD) said the September attack on its network used ARTEX AI, going from initial access to root privileges in 12 minutes by chaining a Zammad zero-day with a local privilege-escalation zero-day