Publications & Analyses
Argus Flow releases, platform announcements, press updates, and cybersecurity analyses.
France: Ransomware Attacks Decline in 2025, SMBs Remain Primary Target
The French National Cybersecurity Agency (ANSSI) reported a decrease in ransomware attacks across France in 2025. However, French small and medium businesses (SMBs) continued to be the organizations most targeted by these malicious campaigns. These attacks typically involve data encryption and potential data exfiltration, threatening data availability and confidentiality.
European Commission Confirms Data Breach on AWS Infrastructure
The European Commission has confirmed a data breach affecting its AWS cloud infrastructure. While the exact number of compromised records and specific data types remain undisclosed, the incident highlights ongoing challenges in cloud security for major organizations.
Malicious Chrome Extensions Campaign Exposes User Data
A campaign involving 108 malicious Chrome extensions has stolen user sessions and Google data. Operating through a single C2 infrastructure, these extensions also injected unwanted ads into users' browsers. Millions of users' data might be at risk due to this widespread attack.
Booking.com User Data Accessed in Security Incident
Booking.com confirmed that some user data, including names, emails, phone numbers, and booking details, was accessed by hackers. The company has secured its systems and contained the issue.
Basic-Fit Data Breach Affects 1 Million Gym Members
Basic-Fit, Europe's largest gym chain, has confirmed a data breach impacting approximately 1 million members. Unauthorized access to company systems led to the theft of personal information, including names, birth dates, and bank details. The incident was recently detected by the company.
Grafana Patches AI Bug Potentially Exposing User Data
Grafana has addressed an AI vulnerability that could have allowed attackers to exfiltrate sensitive user data. The bug involved AI ingesting hidden malicious instructions from attacker-controlled web pages, potentially returning confidential information. This critical flaw has now been patched by Grafana.
Microsoft and Salesforce Patch AI Agent Data Leak Flaws
Two recently fixed prompt injection vulnerabilities in Microsoft Copilot and Salesforce Agentforce could have allowed external attackers to leak sensitive data. Both companies have swiftly released patches to address these security weaknesses.
Vercel Reports Security Incident Affecting Customer Data
Vercel, the creator of Next.js, has disclosed a security incident that resulted in unauthorized access to its systems. The incident potentially led to the exposure of user names, email addresses, and other basic account-related information for some customer accounts. The company urged users to reset passwords and enable multi-factor authentication.
Employee Data Breaches Reach Seven-Year High Driven by Non-Cyber Incidents
Employee data breaches have surged to a seven-year high, with non-cyber incidents identified as the primary driver. This trend highlights the growing risks associated with human error and internal processes rather than direct cyberattacks. The analysis was conducted by law firm Nockolds.
Akira Ransomware Attacks Now Under One Hour, Halcyon Reports
Cybersecurity researchers have observed that the Akira ransomware group is now capable of executing full attacks in less than an hour. This rapid attack speed significantly reduces the window for organizations to detect and respond to threats, increasing the potential for data compromise and operational disruption.
Automotive Ransomware Attacks Doubled in a Year
Ransomware attacks targeting the automotive industry have doubled over the past year, now accounting for over two-fifths of all cyber threats to carmakers. This significant increase highlights a growing risk landscape for manufacturers.
Cookeville Medical Center Notifies Patients of Data Breach
Cookeville Regional Medical Center (CRMC) in Tennessee has informed over 337,000 patients about a data breach stemming from a Rhysida ransomware attack in July 2025. The incident exposed sensitive patient information, including personal and medical records.