WorkOS says it detected unauthorized access to an internal sales application on October 30, 2026, with an attacker reportedly using an AI-driven offensive security framework called ARTEX to automate reconnaissance and exploitation. The company says exposed data included business contact details, customer account histories, and summaries of sales calls and support conversations, but no production services or app data were affected. WorkOS disabled external access to the app, hired forensics investigators, and pledged to notify affected customers.
bleepingcomputer.com
· 2026-11-03
Mintive, an early-stage startup building tools to govern and authorize enterprise AI agents, has raised $11 million total, including a new $7 million seed round led by Cowboy Ventures. Other backers include Coatue, Operator Collective, Hustle Fund, and angel investors Frederic Kerrest, Jeff Dean, and Andrej Karpathy. The company was founded by former Google Brain engineers Jiquan Ngiam and Vijay Vasudevan, who previously worked on Coursera and TensorFlow respectively.
techcrunch.com
· 2026-10-29
The Technical University of Denmark disclosed that attackers used compromised credentials to access DTUBasen, its identity and access management system, downloading over two decades of user data. The system holds records for roughly 40,000 active users and 160,000 former users, including Danish civil registration numbers, addresses, profile pictures and next-of-kin contact details. DTU says it cannot yet determine exactly what data was taken or how many people are affected.
bleepingcomputer.com
· 2026-10-03
An industry commentary argues that SOC 2, the widely used compliance standard for data-handling trust, was built around assumptions that no longer hold as AI agents operate within company systems. The piece contends that agents can act under human credentials—such as an engineer's login—allowing risky activity to pass audits undetected because SOC 2 does not explicitly classify AI agents as a distinct identity type.
bleepingcomputer.com
· 2026-09-25
Cisco says many organizations already have AI agents operating without proper identities, owners, or access controls, often connected directly to production systems by developers without IT's knowledge. The company's identity product lead, Matt Caulfield, is developing Duo Agentic Identity to address this gap as traditional identity and access management tools were never designed for autonomous, machine-speed actors.
zdnet.com
· 2026-09-21
GoKawiil