Publications & Analyses
Argus Flow releases, platform announcements, press updates, and cybersecurity analyses.
Over 1,000 ComfyUI Instances Hit by Cryptomining Botnet
More than 1,000 exposed ComfyUI instances have been targeted by a cryptomining botnet campaign. Attackers are exploiting these systems to mine cryptocurrency, leading to resource degradation and increased operational costs for affected users.
Medusa Ransomware Rapidly Exploits Vulnerabilities to Breach Systems
Medusa ransomware group is noted for its speed in exploiting system vulnerabilities to infiltrate networks. While specific breach details are not provided, their operations typically involve data exfiltration and encryption, affecting various organizational data types. Organizations are urged to enhance their defensive measures against this pervasive threat.
Flowise AI Agent Builder Faces Critical RCE Exploitation, Over 12,000 Instances Exposed
Flowise AI Agent Builder is reportedly under active exploitation for a critical Remote Code Execution (RCE) vulnerability with a CVSS score of 10.0. This ongoing threat potentially affects over 12,000 instances globally, putting various sensitive data at risk. Organizations using Flowise AI are urged to take immediate protective measures.
BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks
The BKA has successfully identified the leaders of the notorious REvil ransomware group. This group is linked to 130 ransomware attacks targeting organizations within Germany. While the specific number of affected records and data types are not detailed in this report, the identification marks a significant step in combating cybercrime.
Germany Identifies "UNKN," Leader of REvil and GandCrab Ransomware Gangs
German authorities have identified "UNKN," the elusive leader behind the prominent Russian ransomware groups GandCrab and REvil. The individual has been named as 31-year-old Russian Daniil Maksimovich Shchukin, linked to at least 130 acts of computer sabotage. This identification marks a significant achievement in global cybercrime enforcement.
European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack
The European Commission has confirmed a data breach connected to a supply chain attack involving the vulnerability scanner Trivy. While specific details on the number of affected records and precise data types remain under investigation, the incident highlights critical software supply chain vulnerabilities.
T-Mobile Clarifies Latest Data Breach Details in New Filing
T-Mobile has issued a new filing to clarify details regarding a recent data breach. The incident involved unauthorized access to customer data, potentially impacting tens of millions of users. Personal information such as names, addresses, phone numbers, and dates of birth were reportedly compromised.
Nacogdoches Memorial Hospital Data Breach Affects 250,000 Patients
Nacogdoches Memorial Hospital recently announced a data breach impacting approximately 250,000 individuals. The incident involved unauthorized access to patient data, potentially compromising sensitive personal and health information. The hospital is taking steps to address the breach and support affected individuals.
Claude Code Vulnerability Discovered After Source Leak
A critical vulnerability has been identified in Claude's code, following a recent source code leak. This flaw poses significant security risks, potentially impacting user data and system integrity. Cybersecurity experts are urging immediate action to mitigate the threat.
Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials
Cyber attackers have exploited the CVE-2025-55182 vulnerability to breach 766 Next.js hosts. This breach resulted in the theft of sensitive credentials from the affected servers.
Hasbro Confirms Cyberattack and Data Incident
Toy manufacturing giant Hasbro has confirmed it was recently hit by a cyberattack. While the full scope is still under investigation, such incidents often involve unauthorized access to systems, potentially compromising customer and employee data.
Claude AI Source Code Leaked Due to npm Packaging Error
Anthropic's Claude AI source code has been inadvertently exposed through an npm packaging error, the company confirmed. This incident involved the accidental publication of internal code, potentially affecting the proprietary intellectual property of the AI model. No user data appears to have been directly compromised in this packaging oversight.