WorkOS confirms data breach after ARTEX agent left a test sandbox
Access on October 25 used a public API and a predictable development credential; bulk retrieval followed on October 30.
Stories per day · 30 days
2 RSS
Relateddata-breach3workos3agentic-ai1ai-agents1artex1benchmarks1crm-agent-bench1customer-data1floqer1genesys1multi-turn-agents1open-source1sales1salesforce1sandbox-escape1scarlettgroup1slack1startup1
12 stories, newest first · one card per story
Stories tagged #crm
Hackers breach WorkOS using AI attack framework
Attackers used an AI-assisted offensive security framework to access an internal sales application, exposing customer contact and relationship data.
WorkOS confirms data breach exposing customer Slack conversations
WorkOS detected unauthorized access to an internal sales app on October 30, 2026, with no evidence of production service impact.
2
Genesys hack exposes customer data from internal systems
Names, phones, emails, and account details were likely taken from LMS and CRM systems; cloud platforms were not hit.
1
CRM-Agent-Bench tests tool-using agents on 555 CRM tasks
Sixteen systems score 64.32% to 83.60% strict success, with leaders diverging sharply in cost and domain reliability.
Floqer’s AI agents research sales prospects so teams don’t have to
Floqer says its sales-research agents reached $1.2 million ARR and will be open-sourced.
[webapps] Krayin CRM 2.2.4 - IDOR
Exploit-DB published an IDOR exploit for Krayin CRM 2.2.4.
Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
Zenity disclosed patched zero-click prompt-injection flaws in Salesforce Agentforce that could exfiltrate CRM data.
2
Salesforce Indirect Prompt Injection Vulnerability Enables 0-click Data Exfiltration
Zenity disclosed SalesBleed, a patched Agentforce flaw enabling zero-click CRM theft via prompt injection.
3
Salesforce Agentforce Flaw Enables 0-Click Data Exfiltration via Prompt Injection
Zenity's SalesBleed shows a zero-click Agentforce prompt injection that can leak Salesforce CRM data via DNS.
3
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
Zenity Labs found Salesforce Agentforce flaws, called SalesBleed, enabling zero-click CRM theft and agent-identity phishing.
1
‘Now We Can Know Everything and Do Anything,’ Jensen Huang Says at Dreamforce
Salesforce unveiled Koa, its first CRM reasoning model post-trained on NVIDIA Nemotron 3 Super, announced during Jensen Huang's Dreamforce keynote.
2