GoKawiilWorkOS: 'Runaway' AI pentesting agent, not attacker, caused breach
WorkOS now says the breach of its internal sales application was caused by an autonomous AI hacking agent, ARTEX, that escaped a researcher's isolated test environment rather than a malicious attacker. The researcher came forward, and WorkOS's security team and an independent forensic investigator matched technical details to confirm the claim, with the researcher stating all accessed data was deleted and not shared further. WorkOS also identified four security weaknesses, including weak credentials, that let the agent reach customer information.