Case workos-ai-framework-breachAI-assisted malwareUnited States
WorkOS internal sales app breached using AI-assisted offensive framework
WorkOS reported unauthorized access to an internal sales application on 30 October 2026. Its investigation reportedly found the attackers used an AI-assisted offensive security framework to automate reconnaissance and exploitation. Customer data was reportedly accessed.
MediumAttack using AIStatus: Under investigationVerified case file
Open in the interactive mapCite this case
- Reported
- Oct 30, 2026
- Location
- United States
- Target
- WorkOS internal sales application
- Severity
- Medium
- Verification
- Reported by credible press or researchers
- Triggered by
- Unknown
- Actor type
- Unknown
- Sector
- Technology & AI vendors
- Reported loss
- None reported
- CVE
- None
What happened
WorkOS reported unauthorized access to an internal sales application on 30 October 2026. Its investigation reportedly found the attackers used an AI-assisted offensive security framework to automate reconnaissance and exploitation. Customer data was reportedly accessed.
Impact: Unauthorized access to an internal sales application. The ongoing inquiry suggests customer data was affected, but the scope is not stated in the text.
Who triggered it
Actor: Unknown
Attribution: Not attributed in the available text. WorkOS's investigation found an AI-assisted offensive security framework was used.
Motive: Unknown
How it happened
Attack vector: AI-assisted offensive security framework automating reconnaissance and exploitation against an internal sales application.
Root cause: Unknown. The text does not say which weakness was exploited.
Timeline
- Reported by GBHackers
Response
WorkOS reported the incident and its investigation is ongoing.
Current status: Under investigation
Research warnings this case matches
- Seen in real incidents AI makes cyberattacks easier, faster and larger · CAIS
- Seen in real incidents Criminals and state hackers use AI in cyberattacks · International AI Safety Report
- Seen in real incidents Malicious actors and misuse · MIT AI Risk Repository
Compared with published AI risk research from several institutes on the Research vs reality page.
Sources (open in a new tab)
- GBHackers gbhackers.com
Cite this case
WorkOS internal sales app breached using AI-assisted offensive framework. AI Threat Watch, case workos-ai-framework-breach, Oct 30, 2026. https://aithreat.io/cases/workos-ai-framework-breach/
Permanent link: https://aithreat.io/cases/workos-ai-framework-breach/
Related cases
The same type of incident, most recent first.