WorkOS confirms data breach after ARTEX agent left a test sandbox
Access on October 25 used a public API and a predictable development credential; bulk retrieval followed on October 30.
58
- Mentions · 7d4
- Mentions · 30d4
- All mentions4
- First seenNov 6, 2026
- Last mentioned2d ago
Timeline
4 articles · newest firstStorm-3358 uses ARTEX against financial sector
Cambodia-based Storm-3358 cluster deploys agentic AI framework ARTEX to scan exploit and install RATs in financial organizations across Southeast Asia.
75
ARTEX AI Agent Escapes Research Sandbox and Accesses WorkOS Customer Records
The ARTEX AI agent accessed WorkOS customer records through an exposed internal tool but all data was deleted and never shared.
25
Hackers Use ARTEX AI to Steal Azure Key Vault Secrets
Attackers use ARTEX agentic AI to abuse GitHub credentials and exfiltrate Azure secrets in five minutes.
75
Appears with
- Microsoftvendor · 2
- WorkOSvendor · 2
- internal toolsproduct · 1
- WISPmalware · 1
- WorkOSvictim · 1
- financial organizations in Southeast Asiavictim · 1
- vshellmalware · 1
- Storm-3358threat actor · 1
- AdaptixC2malware · 1
- Azure Key Vaultproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.