On October 30, developer platform WorkOS found unauthorized access to an internal sales application. The attacker reached business contact details and summaries of customer communications from CRM and sales tools. WorkOS says its app data and production services were not affected.
Investigators linked the intrusion to ARTEX AI, an offensive security framework that automates reconnaissance and exploitation — including request user agents such as artex-enrich/1.0 and norma/0.4. WorkOS says the incident is contained and is notifying affected customers.
Why it matters: internal sales and CRM tools often hold the same contact lists attackers later use for phishing — and AI-assisted tooling is speeding up how those apps get probed.
One step today: review who can reach your CRM and sales apps from outside the office, turn on MFA everywhere those tools allow it, and brief staff that a breach notice may mean more targeted phishing.
Questions about locking down internal apps? Call (818) 791-0055 or visit contact VanquishNet.
Sources: BleepingComputer, SecurityWeek.