WorkOS sales application access exposes customer business records
WorkOS has disclosed unauthorized access to an internal sales application that exposed customer contact details and records of business conversations. The company detected the security incident on October 30, 2026, and released a security bulletin on November 2 after identifying an AI-powered offensive security framework used to automate the attack. Automated reconnaissance and exploitation framework The incident involved the use of an AI-assisted framework that automates reconnaissance and exploitation attempts.…