AGENT NIGHT returns to SF on Dec 9th 🕺🪩💃
Join @WorkOS for our final event of the year, featuring demos & discussion from those building at the frontier of AI.
And dress to impress in your favorite festive cocktail attire! 📸🤵
RSVP now: luma.com/agent-night-2026
@mxstbr codex doesn't delete your mcp connection when you uninstall and reinstall the mcp server. can you fix?
3
5
1,246
Next week is WorkOS Launch Week 🚀
5 days with 5 launches of new products and features. Some big news here... 👀
And our team built this nostalgic RadioShack-inspired site. I love it so much 😍🤓
workos.com/launch-week/fall-…
An update on the WorkOS security incident:
Shortly after our original bulletin, a security researcher contacted us and claimed responsibility. They told us they were evaluating ARTEX, an autonomous penetration testing framework, when their agent escaped its isolated testing environment and interacted with WorkOS unintentionally.
We asked for technical evidence. The researcher provided request details, timestamps, and artifacts from the activity. Our security team and an independent forensic investigator matched that evidence against our logs, establishing with high confidence that this individual was responsible for the unauthorized activity we observed.
The researcher has confirmed that all WorkOS data obtained by their agent has been deleted and was not shared with anyone else.
Their explanation that the activity was unintended does not change how seriously we take the incident or our responsibility to our customers.
Full report: workos.com/security/bulletin…
DX -> AX
For a long time I’ve talked about Agent Experience. Many think AX is the new DX, but that misses the bigger picture.
We’re moving to an agent-first world, where agents are the primary users of all software.
AX isn’t just the new DX. It’s the new UX.
innovationendeavors.com/insi…
4
7
1,643
Security “pre-releases” for critical vulnerabilities are becoming more common, giving many days advance notice.
How should companies prepare for this? Set a calendar reminder? Create an incident? Auto-merge the package when it drops?
Every minute will matter. The threat model has evolved. Agents move at machine speed.
The speed of your CI may be the time interval you remain vulnerable.
Security release pre-alert:
We will release new versions of Node.js 22, 24, and 26 release lines on or shortly, after 2026-11-11 in order to address security vulnerabilities.
The highest severity issue fixed in this release is HIGH.
nodejs.org/en/blog/vulnerabi…
9
16
3,832
Tomorrow we're hosting @Pragmatic_Eng Unplugged and you're invited 🎙️
This is a free event in SF where @GergelyOrosz will interview @bcantrill (Oxide) and @CompleteSkeptic (Jev).
We have a few more tickets remaining. Register here: luma.com/pragmatic-engineer-…
I want to share some context on a security incident we discovered on October 30.
First, the most important thing: WorkOS's production systems are secure. No customer platform data was accessed. This incident was isolated to internal GTM systems.
The attack involved ARTEX, an autonomous AI agent framework used to carry out offensive security operations. It's a striking example of how quickly the capabilities of attackers are evolving.
We've contained the incident, brought in independent experts to investigate, and are working through the details.
Security is something we take extremely seriously, and I believe in being transparent when things go wrong. We'll continue to share updates as we learn more.
Full details: workos.com/security/bulletin…
An update on the WorkOS security incident:
Shortly after our original bulletin, a security researcher contacted us and claimed responsibility. They told us they were evaluating ARTEX, an autonomous penetration testing framework, when their agent escaped its isolated testing environment and interacted with WorkOS unintentionally.
We asked for technical evidence. The researcher provided request details, timestamps, and artifacts from the activity. Our security team and an independent forensic investigator matched that evidence against our logs, establishing with high confidence that this individual was responsible for the unauthorized activity we observed.
The researcher has confirmed that all WorkOS data obtained by their agent has been deleted and was not shared with anyone else.
Their explanation that the activity was unintended does not change how seriously we take the incident or our responsibility to our customers.
Full report: workos.com/security/bulletin…
270
I grew up watching TNG, and Picard was my first role model for leadership.
A philosopher king who valued reason over force, welcomed disagreement, and held himself to the standards he asked of others, never trading his integrity for an easy way out.
RIP Sir Patrick Stewart.
4
29
1,864
yikes. betterauth is pre-announcing a "security release" 😬
why? because agents can immediately deploy broad-scale attacks the minute vulns are disclosed. we saw this last week with php2shell: millions of automated attack attempts within hours of disclosure
this is now a huge problem for open source projects. likely the same thing will happen with betterauth as php. unclear if network WAFs will be able to patch this one... oof 😰
We are preparing a security release for Better Auth, scheduled for Tuesday, November 3, 2026.
The related advisories will be published on GitHub Security Advisories at the same time.
Learn more: better-auth.com/blog/securit…
even stranger: AI inference is perhaps the first time hardware will become *more* valuable instead of depreciating
better models running on older hardware will have a higher $/tok than at initial installation
vicarious cycle of capital acceleration towards abundant intelligence
One thing this analysis is missing is that computer can be resold.
xAI overbuilt but then made a ton of profit on leasing compute to Anthropic.
As long as we are compute constrained this duration mismatch is manageable.
Seems likely we will continue to be compute constrained since real life can’t keep up with AI usage exponential.
2
13
1,460
Honored that @WorkOS has been named to this year’s Cyber60 list 🚀
lsvp.com/cyber60-2026-2027/
Thank you @FortuneMagazine @AWS @lightspeedvp
Tomorrow is Applied AI Showcase at @WorkOS HQ 🔥
Join us for a behind-the-scenes look at how we’re building and using AI tools across WorkOS, including how we build and deploy internal apps and agents (with security of course).
luma.com/applied-ai-showcase…
1
9
861
WorkOS Radar protects your app from fraud, abuse, and attacks
Powering @cursor_ai, @FactoryAI, @modal, and many other AI companies
workos.com/radar
This Post is from a suspended account. Learn more
What's hot? Infrastructure and decision models! 🔥
Excited to host @GergelyOrosz in conversation with @bcantrill and @CompleteSkeptic 🎙️
You won't want to miss this one - make sure to RSVP now 👇
The Pragmatic Engineer Unplugged, live, with @bcantrill & @CompleteSkeptic: 4 Nov, SFJazz Center in SF.
RSVP here, you won't want to miss it: luma.com/pragmatic-engineer-….
Thanks to friends at @WorkOS for helping make this happen!
2
22
1,108