Publications & Analyses
Argus Flow releases, platform announcements, press updates, and cybersecurity analyses.
Personal Data Leak Higher Education Marketing
Over one million individuals' personal information has been exposed online through a marketing network. This network targeted internet users interested in higher education, leading to a significant data leak.
Unsecured Perforce Servers Expose Major Org Data
Reports indicate that numerous major organizations have exposed sensitive data due to unsecured Perforce servers. This misconfiguration potentially affects intellectual property, source code, and internal project details. Organizations are urged to review their server security.
F5 Networks Systems Compromised by Government Hackers for Long Term
Cybersecurity giant F5 Networks confirmed that government-backed hackers gained long-term access to its systems, stealing source code and customer data. The company, which provides defenses to most Fortune 500 firms, delayed notification on national security grounds at the DOJ's request.
University of Mississippi Medical Center Still Offline After Ransomware Attack
The University of Mississippi Medical Center (UMMC) has been offline since a ransomware attack last Thursday. The incident continues to disrupt critical operations, potentially affecting patient services and risking sensitive healthcare data.
Advantest Hit by Ransomware Attack: Cybersecurity Incident
Advantest, a Japanese specialist in testing computer chips for major semiconductor manufacturers, has been impacted by a ransomware attack. The company confirmed it has deployed incident response protocols following the cybersecurity incident. Specific details on affected records or data types are currently undisclosed.
France ANTS ID System Website Hit by Cyberattack, Data Breach Possible
France's ANTS platform, handling applications for IDs, passports, and driver's licenses, experienced a cyberattack. Authorities detected the incident on April 15, warning that personal data of applicants may have been exposed. The extent of the breach and the number of affected individuals are currently under investigation.
Vercel Data Breach Linked to Employee AI Tool Access and Stolen OAuth Tokens
Vercel experienced a data breach after an employee's interaction with an AI tool led to the compromise of OAuth tokens. This incident highlights how stolen OAuth tokens are becoming a significant new attack surface for lateral movement by threat actors.
France: Ransomware Attacks Decline in 2025, SMBs Remain Primary Target
The French National Cybersecurity Agency (ANSSI) reported a decrease in ransomware attacks across France in 2025. However, French small and medium businesses (SMBs) continued to be the organizations most targeted by these malicious campaigns. These attacks typically involve data encryption and potential data exfiltration, threatening data availability and confidentiality.
European Commission Confirms Data Breach on AWS Infrastructure
The European Commission has confirmed a data breach affecting its AWS cloud infrastructure. While the exact number of compromised records and specific data types remain undisclosed, the incident highlights ongoing challenges in cloud security for major organizations.
Malicious Chrome Extensions Campaign Exposes User Data
A campaign involving 108 malicious Chrome extensions has stolen user sessions and Google data. Operating through a single C2 infrastructure, these extensions also injected unwanted ads into users' browsers. Millions of users' data might be at risk due to this widespread attack.
Booking.com User Data Accessed in Security Incident
Booking.com confirmed that some user data, including names, emails, phone numbers, and booking details, was accessed by hackers. The company has secured its systems and contained the issue.
Basic-Fit Data Breach Affects 1 Million Gym Members
Basic-Fit, Europe's largest gym chain, has confirmed a data breach impacting approximately 1 million members. Unauthorized access to company systems led to the theft of personal information, including names, birth dates, and bank details. The incident was recently detected by the company.