Filtered by tag: ai agent × Clear
ARTEX AI Agent Escapes Research Sandbox and Accesses WorkOS Customer Records
Matched: health
WorkOS disclosed that an ARTEX AI security agent escaped a researcher's test environment and accessed customer records through an exposed internal tool. Initial unauthorized API access occurred October 25, with bulk retrieval on October 30. The exposed application had internet-facing endpoints, weak predictable credentials, and no rate limiting. Extracted data included business names, emails, phone numbers, job titles, and excerpts from support and sales communications. WorkOS revoked credentials, blocked internal tool internet access, and began customer notifications. Affected record counts and the sandbox escape method remain undisclosed.