Publications & Analyses
Argus Flow releases, platform announcements, press updates, and cybersecurity analyses.
Grafana Patches AI Bug Potentially Exposing User Data
Grafana has addressed an AI vulnerability that could have allowed attackers to exfiltrate sensitive user data. The bug involved AI ingesting hidden malicious instructions from attacker-controlled web pages, potentially returning confidential information. This critical flaw has now been patched by Grafana.
Eurail Data Breach Affects Over 300,000 Travelers
In December 2025, Eurail suffered a data breach, leading to the theft of names and passport numbers belonging to 308,777 individuals. The company is now notifying affected travelers about the exposure of their personal information.
Cursor AI Vulnerability Exposed Developer Devices
A newly discovered vulnerability in Cursor AI exposed the devices of many developers. This critical flaw could allow unauthorized access to sensitive data including source code, API keys, and internal credentials. The full extent of data compromise and the number of affected individuals are still being assessed.
Vercel Confirms Data Breach as Hackers Attempt to Sell Stolen Information
Cloud development platform Vercel has confirmed a security incident after threat actors claimed to have breached its systems. Hackers are reportedly attempting to sell stolen user data online, potentially affecting account credentials and related information.
Blue Cross Blue Shield Data Breach Investigation Allowed to Proceed
A judge has ruled that a state auditor's investigation into a data breach impacting Blue Cross Blue Shield members can move forward. The breach potentially exposed sensitive health and personal information, though the exact number of affected individuals and the full scope of the compromise remain under investigation.
Los Angeles County School Employee Tax Documents Potentially Stolen
A data breach incident in Los Angeles County may have exposed tax documents belonging to numerous school employees. The information potentially compromised includes sensitive personal and financial data. Investigations are ongoing to determine the full scope and impact of the breach.
Vercel Confirms Data Breach Linked to Context AI Incident
Vercel has announced a security incident, revealing that limited customer credentials were exposed. The breach is attributed to a wider compromise involving Context AI. Customers are advised to take immediate precautionary measures.
CPUID Breach Distributes STX RAT Through Trojanized CPU-Z and HWMonitor Downloads
CPUID's official download infrastructure was compromised, leading to the distribution of the STX Remote Access Trojan (RAT) through malicious versions of CPU-Z and HWMonitor. Users who downloaded these compromised files are at significant risk of unauthorized system access, data theft, and further malicious activities.
Google API Keys in Android Apps Expose Gemini Endpoints
A new security report highlights that Google API keys embedded within certain Android applications could allow unauthorized access to Gemini AI endpoints. This vulnerability potentially exposes sensitive interactions with Google's AI services, raising concerns about data privacy and service integrity.
Eurail Data Breach Affects 300,000 Individuals
Eurail has announced a data breach impacting approximately 300,000 individuals. The incident may have led to the compromise of personal data, including customer names, email addresses, and potentially travel-related information.
OpenSSL Data Leakage Vulnerability Patched
A critical data leakage vulnerability has been identified and patched in the OpenSSL library. This flaw could have potentially led to the exposure of sensitive information, including cryptographic keys and user data. Users are urged to update their OpenSSL installations immediately to apply the security fix.
Iran-Linked Hackers Disrupt US Critical Infrastructure via PLCs
Iran-linked hacker groups have reportedly targeted Internet-exposed Programmable Logic Controllers (PLCs) to disrupt critical infrastructure in the United States. This attack primarily caused operational disturbances within the affected systems, focusing on control system integrity rather than data exfiltration.