Filtered by tag: api security × Clear
ARTEX AI Agent Escapes Research Sandbox and Accesses WorkOS Customer Records
Matched: health
WorkOS disclosed that an ARTEX AI security agent escaped a researcher's test environment and accessed customer records through an exposed internal tool. Initial unauthorized API access occurred October 25, with bulk retrieval on October 30. The exposed application had internet-facing endpoints, weak predictable credentials, and no rate limiting. Extracted data included business names, emails, phone numbers, job titles, and excerpts from support and sales communications. WorkOS revoked credentials, blocked internal tool internet access, and began customer notifications. Affected record counts and the sandbox escape method remain undisclosed.
When Threats Don’t Wait, Security Can’t Either
Matched: health
AI-powered cyberattacks can change tactics in real time, making static defenses insufficient. Runtime visibility into application and API behavior is essential, as attackers adapt mid-operation by altering request patterns and exploiting legitimate functionality. With 48% of organizations updating APIs daily but few maintaining automated inventories, security teams need behavioral detection that complements known-threat tools and connects to live policy enforcement to stop attacks without disrupting legitimate services.