{"id":"CMP-202611-ugcn2w","kind":"campaign","aliases":[],"related":["CMP-202610-china-linked-vapor-panda-uses-the-artex-ai-agent-framework-t"],"title":"WorkOS breached: attacker using the ARTEX AI framework got into an internal sales app and took customer contacts, account histories and sales/support call summaries","description":null,"summary":"WorkOS (enterprise SSO, auth and user-management APIs used by 3,000+ companies) found unauthorized access to an internal application used by its sales team on 30 Oct 2026. The attacker took business contact details (names, emails, job titles, companies from the CRM), customer account histories (product usage, connection and directory health), summaries and excerpts of sales calls, support discussions and customer Slack conversations, and account relationship information. WorkOS says no app data or production services were accessed and the incident is contained. Founder Michael Grinich says the attacker used the ARTEX AI offensive framework (also used by VAPOR PANDA). WorkOS will notify affected customers directly; who is affected is not yet public.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"WorkOS","fixed":[],"vendor":"WorkOS"}],"ecosystems":[],"tags":["campaign","early-warning"],"not_affected_if":[],"how_to_check":"You are exposed if your company is a WorkOS customer (check for a direct notice from WorkOS). Expect phishing or social engineering that cites real details of your WorkOS account, sales calls or support/Slack threads. ARTEX requests in the attack used user agents 'artex-enrich/1.0' and 'norma/0.4'; search your own web and app logs for them.","fix":"Treat unexpected messages that claim to be from WorkOS, or that quote your WorkOS account details, as possible phishing and verify them through a known contact. Warn staff who dealt with WorkOS sales or support. Block or alert on the user agents artex-enrich/1.0 and norma/0.4. No customer action on WorkOS credentials has been asked for so far.","status":"open","published_at":null,"first_seen_at":"2026-11-03T22:18:46+00:00","triaged_at":"2026-11-03T22:18:46+00:00","updated_at":"2026-11-03T22:20:17+00:00","category":"vendor","confidence":null,"triage":null,"analyst_status":"done","analyst_note":null,"search":"'-202611':26A '000':47B '2026':64B '3':46B '30':62B 'access':51B,113B 'account':19A,80B,101B 'affect':139B,144B 'ai':7A,128B 'also':131B 'api':43B 'app':14A,107B 'applic':55B 'artex':6A,127B 'attack':3A,66B,124B 'auth':38B 'breach':2A,29A 'busi':68B 'call':23A,93B 'campaign':31B 'cmp':25A 'compani':48B,75B 'connect':84B 'contact':18A,69B 'contain':118B 'convers':99B 'crm':78B 'custom':17A,79B,97B,140B 'data':108B 'detail':70B 'direct':141B 'directori':86B 'discuss':95B 'earli':33B 'early-warn':32B 'email':72B 'enterpris':36B 'excerpt':90B 'found':49B 'founder':119B 'framework':8A,130B 'got':9A 'grinich':121B 'health':87B 'histori':20A,81B 'incid':116B 'inform':103B 'intern':12A,54B 'job':73B 'manag':42B 'michael':120B 'name':71B 'notifi':138B 'oct':63B 'offens':129B 'panda':135B 'product':82B,110B 'public':148B 'relationship':102B 'sale':13A,59B,92B 'sales/support':22A 'say':105B,122B 'servic':111B 'slack':98B 'sso':37B 'summari':24A,88B 'support':94B 'team':60B 'titl':74B 'took':16A,67B 'ugcn2w':27A 'unauthor':50B 'usag':83B 'use':4A,44B,56B,125B,132B 'user':41B 'user-manag':40B 'vapor':134B 'warn':34B 'worko':1A,35B,104B,136B 'workos':28A,30A 'yet':147B","nicknames":["WorkOS breach"],"mitigations":[],"who_affected":null,"tier":"A","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":["workos","workosbreach"],"ptokens":["workos"],"labels":["campaign","earlywarning","medium","vendor"],"campaign_type":"breach","first_public_at":"2026-11-03T21:28:44+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"analyst","external_id":"CMP-202611-ugcn2w","url":null,"severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-11-03T22:18:46+00:00","fetched_at":"2026-11-03T22:18:46+00:00","note":null}],"documents":[{"id":60977,"url":"https://x.com/BleepinComputer/status/2117730885340414003","title":"@BleepinComputer: WorkOS says attacker used ARTEX AI to breach internal sales app\nhttps://t.co/kQ5","kind":"post","source":"x","publisher":null,"text":"WorkOS says attacker used ARTEX AI to breach internal sales app\nhttps://t.co/kQ5QNEkDDl\n\nhttps://t.co/kQ5QNEkDDl\n\nlikes 7 reposts 1","published_at":"2026-11-03T21:29:23+00:00","relation":"describes","confidence":null,"note":null},{"id":61073,"url":"https://www.bleepingcomputer.com/news/security/workos-says-attacker-used-artex-ai-to-breach-internal-sales-app/","title":"BleepingComputer: WorkOS says attacker used ARTEX AI to breach internal sales app","kind":"blog","source":"blog","publisher":null,"text":"WorkOS says attacker used ARTEX AI to breach internal sales app\n\nDeveloper platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications. [...]","published_at":"2026-11-03T21:28:44+00:00","relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}