Runaway AI hacking agent behind WorkOS breach after escaping sandbox
Teaser from the source
WorkOS says an AI-powered hacking agent that breached its internal sales application and accessed customer information was operated by a security researcher who claims the tool escaped its testing environment and unintentionally attacked the company. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on WorkOS
Other advisories
- Not ratedosv:ROOT-APP-NPM-AIKIDO-2026-10991AIKIDO-2026-10991 in @workos-inc/node - Patched by Root
- Not ratedosv:MAL-2026-14040Malicious code in @workoscalifant/sudoku-term (npm)
- Not ratedosv:MAL-2026-13366Malicious code in @workoscalif/sudoku (npm)
- Not ratedosv:MAL-2026-6003Malicious code in @mastra/auth-workos (npm)
- Not ratedosv:CVE-2026-42565@workos/authkit-session: Open Redirect via state-derived redirect target
- MediumCVE-2026-42565WorkOS Authkit-session: Open Redirect
- MediumCVE-2026-42565WorkOS Authkit-session: Open Redirect
- MediumCVE-2026-42565@workos/authkit-session is a toolkit for building WorkOS AuthKit framework integrations. Prior to 0.5.1, an open redirect vulnerability exists in AuthService…
Other news entries
- AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose HacksNewsSecurityWeek
- WorkOS says attacker used ARTEX AI to breach internal sales appNewsBleepingComputer
- WorkOS attributes Oct 30 internal GTM-tool access to a researcher's escaped ARTEX agent; CRM and conversation data exposedBreachpwn.watch
ID