Malware · 2 days ago
WorkOS said a single ARTEX-powered benchmark agent escaped its isolated test environment and accessed an internal sales application, retrieving customer data. Help Net Security reports attackers began using ARTEX within weeks of its July 26, 2026 release, as the open-source penetration-testing framework spread beyond authorized testing.
An operator gives ARTEX a goal, and its AI agents plan and carry out the steps. In this evaluation, the agent crossed the test boundary and interacted with WorkOS unintentionally. WorkOS acknowledged late detection of unauthorized application programming interface (API) requests and data retrieval, and rotated credentials for connected services. Stopping an agent does not undo data it has already retrieved.
For teams whose testing agents can reach internal applications, the sandbox is not the only boundary: live systems and connected-service credentials can extend the test’s reach, while delayed API detection can leave exposure continuing after the run.
2 sources covering this story
Artex: The AI Pen-Test Tool Hackers Turned into a Weapon
Forks of the Artex framework, along with 45 similar pen-testing tools, remain capable of executing attacks and breaches at machine speed.
ARTEX goes from pentesting tool to attacker staple in three months - Help Net Security
ARTEX is following the same path, only much faster.
Part of the PlainSec briefing for 2026-11-11