Botnet of more than 17 million devices dismantled
2026-05-31T08:51:44Z•734117d97d9241f11f217f4d89e1b54595a4962e1b7b0acbf26acc162059719c
AI-securityBadHostBitLockerCISA-credentialsCopyFailDaemonToolsGoogle-exploit-publicationLinuxRussiaSSD-sidechannel-tracking','browser-privacy','prompt-injection','StarletteTeamPCPVPN-hackbotnetcredential-theftcritical-vulnerabilityelement-dataexploit-disclosuregithub-leaklaw-enforcement-seizureopen-source-compromiseproxy-networkresidential-proxysupply-chain-attackzero-day
What happened
Multiple high-impact security incidents and themes surfaced: a 17+ million-device botnet tied to a Russia-based residential-proxy network was dismantled; widespread supply-chain and open-source poisoning (including TeamPCP activity, a monthlong backdoor in Daemon Tools, and credential‑stealing in element-data) has infected developer ecosystems; a critical vulnerability dubbed “BadHost” in the Starlette package threatens millions of AI agents; a zero-day reportedly defeats default Windows 11 BitLocker protections; a severe Linux threat (CopyFail) and other kernel-level vulnerabilities demand急/‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- arstechnica_security
- Record identifier
- 734117d97d9241f11f217f4d89e1b54595a4962e1b7b0acbf26acc162059719c
- Enrichment time
- 2026-05-31T08:51:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.