WorkOS Issues Update on Unauthorized Access to Internal Sales Systems by ARTEX AI Penetration Testing Agent

In its November 6 bulletin, WorkOS says its security team and an independent forensics firm correlated the researcher's request details, timestamps and artifacts with its logs and validated the claim; the root cause was a sales tool on a legacy internal platform whose API was publicly exposed by overly permissive access controls, accepted a predictable local-development credential, lacked rate limiting, and was not detected in time. WorkOS removed internet access to the tool, revoked or rotated credentials for every connected service, blocked internet access to all internally developed tools at its network edge from October 31, and since November 3 regularly tests its internet-facing systems with ARTEX; the bulletin also lists IPv4/IPv6 addresses, User-Agents and JA4 fingerprints as indicators that organizations can check against their own logs.

“Adaptive Security's AI agents analyze email intent, context, and behavior to uncover phishing, business email compromise, and invoice fraud.”

Veradigm told the SEC that one of its third-party vendors suffered a cybersecurity incident in which an unauthorized party obtained credentials to a Veradigm API from the vendor's environment, affecting data of a small number of customers .