A sales tool, an AI toolkit and the customer conversations it exposed
Shownotes
Morning edition, Thursday 5 November 2026
WorkOS says an attacker using an AI offensive toolkit reached an internal sales app and read customer call summaries. What it means for UK supplier risk, plus a Zyxel switch flaw that outlived its patch and a DreamHost breach.
Sources
- WorkOS: October 30th, 2026 Data Security Incident (bulletin)
- BleepingComputer: WorkOS says attacker used ARTEX AI to breach internal sales app
- BleepingComputer: Chinese hackers use ARTEX AI in automated attacks against 200 orgs
- Zyxel security advisory for out-of-bounds write vulnerability in GS1900 series switches
- BleepingComputer: Zyxel fixes zero-day exploited to hack nearly 1,000 network switches
- DreamHost data security breach notice letter (California Attorney General)