AI Access Token Breaches Hit WorkOS, Northflank, Trigger.dev

Hackers harvested AI access tokens and used AI-assisted offensive tools to automate attacks, prompting WorkOS, Northflank, and Trigger.dev to disclose breaches.

Disclosed 4 November 2026 · Record updated 4 November 2026

Impact

Multiple developer platform providers disclosed breaches linked to theft of AI access tokens and AI-assisted attack automation.

Our coverage

A hand reaches through a fence's gap, fingers multiplying into dozens, each grasping glowing key-shaped tokens while storm winds scatter them across darkened server rooms.

Incidents

WorkOS, Northflank and Trigger.dev disclose AI-linked breaches

SecurityWeek reported on 4 November 2026 that attackers harvested AI access tokens and used AI-assisted offensive tools to automate intrusions at three vendors.

4 Nov 2026

Sources

securityweek.comhttps://securityweek.com/ai-linked-breaches-mount-as-workos-northflank-trigger-dev-disclose-hacks