AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks

Hi, what are you looking for?

Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.

By

Flipboard

Reddit

Whatsapp

Whatsapp

Email

AI-related cyberattacks are surging, with hackers stealing AI access keys to monetize them and using AI tools to speed up their intrusions.Over the past month, at least a dozen AI developer platforms were hit, with the most recent incidents involving CommandCode, Northflank, Trigger.dev, Chainstack, and WorkOS.Across all incidents, the hackers appear to have been hunting for AI access tokens they could monetize, relying on AI agents to speed up and streamline their attacks.While part of the same industry-wide trend, the attacks do not appear to be related, and initial access varies from compromised credentials to third-party dependencies and vulnerability exploitation.The attackers hitAndromeda,Brev (NVIDIA),CommandCode,Fireworks AI,Lightning AI,Northflank,OpenCode,Railway,Trigger.dev,Warp, andZeabur, mainly looking for stored customer secrets.“Intruders are reaching AI provider credentials through the intermediary layer of hosting platforms, evaluation services, and developer consoles, and recent gateway compromises show the same interest in these secrets. Because that layer holds credentials on behalf of many downstream customers, a single intrusion can expose keys for many inference accounts at once,” Cloud Security Alliancepointed out.Advertisement. Scroll to continue reading.Per Wiz’sanalysisof the incidents, the surge is caused by the rise of LLM-jacking and LLM broker infrastructure, which make the stolen AI access tokens easily monetizable and will likely attract more threat actors to credential theft.The cybersecurity outfit notes that this demand is also driven by distillation (training a cheaper model on the outputs of a more advanced one), “notablyalleged against Chinese AI labs”.Wiz says it has observed hackers abusing enterprise credentials compromised in these attacks, including two cases that “shared an identical first unauthorized activity, which happened within 30 minutes of the reported credential access within the vendor breach.”The company observed multiple threat actors using the same compromised keys, which “suggests a robust market for this type of credential”.Artex used to automate attacksThis week, blockchain infrastructure and Web3 services provider Chainstack and API platform for building enterprise applications WorkOS disclosed cyberattacks that relied on the open source AI penetration testing framework Artex for automation.Multiple companies have linked attacks attributed to the Chinese APT Storm-0940 to the use of Artex, including a recent campaigntargeting ConnectWise customers.Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Over the past month, at least a dozen AI developer platforms were hit, with the most recent incidents involving CommandCode, Northflank, Trigger.dev, Chainstack, and WorkOS.Across all incidents, the hackers appear to have been hunting for AI access tokens they could monetize, relying on AI agents to speed up and streamline their attacks.While part of the same industry-wide trend, the attacks do not appear to be related, and initial access varies from compromised credentials to third-party dependencies and vulnerability exploitation.The attackers hitAndromeda,Brev (NVIDIA),CommandCode,Fireworks AI,Lightning AI,Northflank,OpenCode,Railway,Trigger.dev,Warp, andZeabur, mainly looking for stored customer secrets.“Intruders are reaching AI provider credentials through the intermediary layer of hosting platforms, evaluation services, and developer consoles, and recent gateway compromises show the same interest in these secrets. Because that layer holds credentials on behalf of many downstream customers, a single intrusion can expose keys for many inference accounts at once,” Cloud Security Alliancepointed out.Advertisement. Scroll to continue reading.Per Wiz’sanalysisof the incidents, the surge is caused by the rise of LLM-jacking and LLM broker infrastructure, which make the stolen AI access tokens easily monetizable and will likely attract more threat actors to credential theft.The cybersecurity outfit notes that this demand is also driven by distillation (training a cheaper model on the outputs of a more advanced one), “notablyalleged against Chinese AI labs”.Wiz says it has observed hackers abusing enterprise credentials compromised in these attacks, including two cases that “shared an identical first unauthorized activity, which happened within 30 minutes of the reported credential access within the vendor breach.”The company observed multiple threat actors using the same compromised keys, which “suggests a robust market for this type of credential”.Artex used to automate attacksThis week, blockchain infrastructure and Web3 services provider Chainstack and API platform for building enterprise applications WorkOS disclosed cyberattacks that relied on the open source AI penetration testing framework Artex for automation.Multiple companies have linked attacks attributed to the Chinese APT Storm-0940 to the use of Artex, including a recent campaigntargeting ConnectWise customers.Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Across all incidents, the hackers appear to have been hunting for AI access tokens they could monetize, relying on AI agents to speed up and streamline their attacks.While part of the same industry-wide trend, the attacks do not appear to be related, and initial access varies from compromised credentials to third-party dependencies and vulnerability exploitation.The attackers hitAndromeda,Brev (NVIDIA),CommandCode,Fireworks AI,Lightning AI,Northflank,OpenCode,Railway,Trigger.dev,Warp, andZeabur, mainly looking for stored customer secrets.“Intruders are reaching AI provider credentials through the intermediary layer of hosting platforms, evaluation services, and developer consoles, and recent gateway compromises show the same interest in these secrets. Because that layer holds credentials on behalf of many downstream customers, a single intrusion can expose keys for many inference accounts at once,” Cloud Security Alliancepointed out.Advertisement. Scroll to continue reading.Per Wiz’sanalysisof the incidents, the surge is caused by the rise of LLM-jacking and LLM broker infrastructure, which make the stolen AI access tokens easily monetizable and will likely attract more threat actors to credential theft.The cybersecurity outfit notes that this demand is also driven by distillation (training a cheaper model on the outputs of a more advanced one), “notablyalleged against Chinese AI labs”.Wiz says it has observed hackers abusing enterprise credentials compromised in these attacks, including two cases that “shared an identical first unauthorized activity, which happened within 30 minutes of the reported credential access within the vendor breach.”The company observed multiple threat actors using the same compromised keys, which “suggests a robust market for this type of credential”.Artex used to automate attacksThis week, blockchain infrastructure and Web3 services provider Chainstack and API platform for building enterprise applications WorkOS disclosed cyberattacks that relied on the open source AI penetration testing framework Artex for automation.Multiple companies have linked attacks attributed to the Chinese APT Storm-0940 to the use of Artex, including a recent campaigntargeting ConnectWise customers.Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

While part of the same industry-wide trend, the attacks do not appear to be related, and initial access varies from compromised credentials to third-party dependencies and vulnerability exploitation.The attackers hitAndromeda,Brev (NVIDIA),CommandCode,Fireworks AI,Lightning AI,Northflank,OpenCode,Railway,Trigger.dev,Warp, andZeabur, mainly looking for stored customer secrets.“Intruders are reaching AI provider credentials through the intermediary layer of hosting platforms, evaluation services, and developer consoles, and recent gateway compromises show the same interest in these secrets. Because that layer holds credentials on behalf of many downstream customers, a single intrusion can expose keys for many inference accounts at once,” Cloud Security Alliancepointed out.Advertisement. Scroll to continue reading.Per Wiz’sanalysisof the incidents, the surge is caused by the rise of LLM-jacking and LLM broker infrastructure, which make the stolen AI access tokens easily monetizable and will likely attract more threat actors to credential theft.The cybersecurity outfit notes that this demand is also driven by distillation (training a cheaper model on the outputs of a more advanced one), “notablyalleged against Chinese AI labs”.Wiz says it has observed hackers abusing enterprise credentials compromised in these attacks, including two cases that “shared an identical first unauthorized activity, which happened within 30 minutes of the reported credential access within the vendor breach.”The company observed multiple threat actors using the same compromised keys, which “suggests a robust market for this type of credential”.Artex used to automate attacksThis week, blockchain infrastructure and Web3 services provider Chainstack and API platform for building enterprise applications WorkOS disclosed cyberattacks that relied on the open source AI penetration testing framework Artex for automation.Multiple companies have linked attacks attributed to the Chinese APT Storm-0940 to the use of Artex, including a recent campaigntargeting ConnectWise customers.Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

The attackers hitAndromeda,Brev (NVIDIA),CommandCode,Fireworks AI,Lightning AI,Northflank,OpenCode,Railway,Trigger.dev,Warp, andZeabur, mainly looking for stored customer secrets.“Intruders are reaching AI provider credentials through the intermediary layer of hosting platforms, evaluation services, and developer consoles, and recent gateway compromises show the same interest in these secrets. Because that layer holds credentials on behalf of many downstream customers, a single intrusion can expose keys for many inference accounts at once,” Cloud Security Alliancepointed out.Advertisement. Scroll to continue reading.Per Wiz’sanalysisof the incidents, the surge is caused by the rise of LLM-jacking and LLM broker infrastructure, which make the stolen AI access tokens easily monetizable and will likely attract more threat actors to credential theft.The cybersecurity outfit notes that this demand is also driven by distillation (training a cheaper model on the outputs of a more advanced one), “notablyalleged against Chinese AI labs”.Wiz says it has observed hackers abusing enterprise credentials compromised in these attacks, including two cases that “shared an identical first unauthorized activity, which happened within 30 minutes of the reported credential access within the vendor breach.”The company observed multiple threat actors using the same compromised keys, which “suggests a robust market for this type of credential”.Artex used to automate attacksThis week, blockchain infrastructure and Web3 services provider Chainstack and API platform for building enterprise applications WorkOS disclosed cyberattacks that relied on the open source AI penetration testing framework Artex for automation.Multiple companies have linked attacks attributed to the Chinese APT Storm-0940 to the use of Artex, including a recent campaigntargeting ConnectWise customers.Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

“Intruders are reaching AI provider credentials through the intermediary layer of hosting platforms, evaluation services, and developer consoles, and recent gateway compromises show the same interest in these secrets. Because that layer holds credentials on behalf of many downstream customers, a single intrusion can expose keys for many inference accounts at once,” Cloud Security Alliancepointed out.Advertisement. Scroll to continue reading.Per Wiz’sanalysisof the incidents, the surge is caused by the rise of LLM-jacking and LLM broker infrastructure, which make the stolen AI access tokens easily monetizable and will likely attract more threat actors to credential theft.The cybersecurity outfit notes that this demand is also driven by distillation (training a cheaper model on the outputs of a more advanced one), “notablyalleged against Chinese AI labs”.Wiz says it has observed hackers abusing enterprise credentials compromised in these attacks, including two cases that “shared an identical first unauthorized activity, which happened within 30 minutes of the reported credential access within the vendor breach.”The company observed multiple threat actors using the same compromised keys, which “suggests a robust market for this type of credential”.Artex used to automate attacksThis week, blockchain infrastructure and Web3 services provider Chainstack and API platform for building enterprise applications WorkOS disclosed cyberattacks that relied on the open source AI penetration testing framework Artex for automation.Multiple companies have linked attacks attributed to the Chinese APT Storm-0940 to the use of Artex, including a recent campaigntargeting ConnectWise customers.Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Per Wiz’sanalysisof the incidents, the surge is caused by the rise of LLM-jacking and LLM broker infrastructure, which make the stolen AI access tokens easily monetizable and will likely attract more threat actors to credential theft.The cybersecurity outfit notes that this demand is also driven by distillation (training a cheaper model on the outputs of a more advanced one), “notablyalleged against Chinese AI labs”.Wiz says it has observed hackers abusing enterprise credentials compromised in these attacks, including two cases that “shared an identical first unauthorized activity, which happened within 30 minutes of the reported credential access within the vendor breach.”The company observed multiple threat actors using the same compromised keys, which “suggests a robust market for this type of credential”.Artex used to automate attacksThis week, blockchain infrastructure and Web3 services provider Chainstack and API platform for building enterprise applications WorkOS disclosed cyberattacks that relied on the open source AI penetration testing framework Artex for automation.Multiple companies have linked attacks attributed to the Chinese APT Storm-0940 to the use of Artex, including a recent campaigntargeting ConnectWise customers.Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

The cybersecurity outfit notes that this demand is also driven by distillation (training a cheaper model on the outputs of a more advanced one), “notablyalleged against Chinese AI labs”.Wiz says it has observed hackers abusing enterprise credentials compromised in these attacks, including two cases that “shared an identical first unauthorized activity, which happened within 30 minutes of the reported credential access within the vendor breach.”The company observed multiple threat actors using the same compromised keys, which “suggests a robust market for this type of credential”.Artex used to automate attacksThis week, blockchain infrastructure and Web3 services provider Chainstack and API platform for building enterprise applications WorkOS disclosed cyberattacks that relied on the open source AI penetration testing framework Artex for automation.Multiple companies have linked attacks attributed to the Chinese APT Storm-0940 to the use of Artex, including a recent campaigntargeting ConnectWise customers.Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Wiz says it has observed hackers abusing enterprise credentials compromised in these attacks, including two cases that “shared an identical first unauthorized activity, which happened within 30 minutes of the reported credential access within the vendor breach.”The company observed multiple threat actors using the same compromised keys, which “suggests a robust market for this type of credential”.Artex used to automate attacksThis week, blockchain infrastructure and Web3 services provider Chainstack and API platform for building enterprise applications WorkOS disclosed cyberattacks that relied on the open source AI penetration testing framework Artex for automation.Multiple companies have linked attacks attributed to the Chinese APT Storm-0940 to the use of Artex, including a recent campaigntargeting ConnectWise customers.Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

The company observed multiple threat actors using the same compromised keys, which “suggests a robust market for this type of credential”.Artex used to automate attacksThis week, blockchain infrastructure and Web3 services provider Chainstack and API platform for building enterprise applications WorkOS disclosed cyberattacks that relied on the open source AI penetration testing framework Artex for automation.Multiple companies have linked attacks attributed to the Chinese APT Storm-0940 to the use of Artex, including a recent campaigntargeting ConnectWise customers.Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

This week, blockchain infrastructure and Web3 services provider Chainstack and API platform for building enterprise applications WorkOS disclosed cyberattacks that relied on the open source AI penetration testing framework Artex for automation.Multiple companies have linked attacks attributed to the Chinese APT Storm-0940 to the use of Artex, including a recent campaigntargeting ConnectWise customers.Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Multiple companies have linked attacks attributed to the Chinese APT Storm-0940 to the use of Artex, including a recent campaigntargeting ConnectWise customers.Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Chainstackwas hit on October 26, and the attackers accessed a development environment and parts of the company’s production environment through a third-party component.“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

“The attacker accessed a database containing customer account information. Information that may have been exposed includes organization names, account holder names, the email addresses of your organization’s members on Chainstack, and password hashes,” the company said this week.Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Node credentials might have been exposed as well, as the attackers had access to systems storing them, and Chainstack prompted customers to rotate those credentials.On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

On October 30,WorkOSsays, the hackers compromised an internal application used by its sales team and accessed business contact details and summaries of customer communications.The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

The information includes names, email addresses, phone numbers, job titles, company affiliations, customer account histories, sales details, customer-relationship information, customer communications, and information about customers’ use of WorkOS products.Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Related:UK Cyber Chief Says the UK Will Face AI Cyberattacks on Critical Infrastructure by 2028Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Related:Cisco Open Sources Quarry to Catch AI Agent Attacks Hidden in Harmless StepsRelated:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Related:Mythos 5 Ignored Real-World Harm in July AttackRelated:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Related:‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Ionut Arghire is an international correspondent for SecurityWeek.

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Rob T. Lee has joined Dragos as Chief AI Officer.

Barracuda has appointed Dan Fletcher as CFO.

Artemis Security has appointed Arun Singh as CGO.

As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.(Torsten George)

Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.(Steve Durbin)

The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.(Sravish Sridhar)

Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.(Tod Beardsley)

Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.(Matias Madou)

Flipboard

Reddit

Whatsapp

Whatsapp

Email

Got a confidential news tip? We want to hear from you.

Reach a large audience of enterprise cybersecurity professionals

Subscribe to the SecurityWeek Daily Briefing and get the latest content delivered to your inbox.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.