Former hacker, now builder. Razzlekhan's husband.
New York, NY
Joined November 2010
- Tweets861
- Following259
- Followers2.1K
- Likes722
Expect a lot more agent escape incidents in the future
An update on the WorkOS security incident:
Shortly after our original bulletin, a security researcher contacted us and claimed responsibility. They told us they were evaluating ARTEX, an autonomous penetration testing framework, when their agent escaped its isolated testing environment and interacted with WorkOS unintentionally.
We asked for technical evidence. The researcher provided request details, timestamps, and artifacts from the activity. Our security team and an independent forensic investigator matched that evidence against our logs, establishing with high confidence that this individual was responsible for the unauthorized activity we observed.
The researcher has confirmed that all WorkOS data obtained by their agent has been deleted and was not shared with anyone else.
Their explanation that the activity was unintended does not change how seriously we take the incident or our responsibility to our customers.
Full report: workos.com/security/bulletin…
161
Any password longer than 256 characters can be used to log in to many servers.
That's right. ANY PASSWORD.
Amazing writeup by @kultekin
sshhole.com/
1
197
Why would you announce that your software is vulnerable without releasing a fix at the same time?
You just make yourself a target.
Security release pre-alert:
We will release new versions of Node.js 22, 24, and 26 release lines on or shortly, after 2026-11-11 in order to address security vulnerabilities.
The highest severity issue fixed in this release is HIGH.
nodejs.org/en/blog/vulnerabi…
170
An engineer at Binance was lured into a fake job interview and convinced to download and execute malicious code as part of a "coding assignment".
Do not run arbitrary code people send you!!
3
5
534
Everyone frantically trying to download ARTEX right now
I want to share some context on a security incident we discovered on October 30.
First, the most important thing: WorkOS's production systems are secure. No customer platform data was accessed. This incident was isolated to internal GTM systems.
The attack involved ARTEX, an autonomous AI agent framework used to carry out offensive security operations. It's a striking example of how quickly the capabilities of attackers are evolving.
We've contained the incident, brought in independent experts to investigate, and are working through the details.
Security is something we take extremely seriously, and I believe in being transparent when things go wrong. We'll continue to share updates as we learn more.
Full details: workos.com/security/bulletin…
371
Most people don't realize how many physical devices are connected to the Internet
Tis the season of memory vulns. Expect many more
What a disaster atlasum.net/blog/cve-2026-98…
1
1
272