Search — “norma/0.4”

Developer platform WorkOS disclosed unauthorized access to an internal application used by its sales team, identified on October 30, 2026, where the attacker took business contact records, customer account histories, and summaries of customer communications. The company says the attacker used the ARTEX AI offensive security framework to automate reconnaissance and exploitation attempts, and that no WorkOS app data or production services were affected. Hunters should look for web requests bearing the user agents 'artex-enrich/1.0' and 'norma/0.4', and recipients of the company warned about phishing and social engineering using the exposed contact data.