Netherlands seizes 800 servers of hosting firm enabling cyberattacks
2026-05-22T19:23:27Z•7558d088acb2863e81a7a0a6b7cfdc2630e4f061d4657df1c0f739a22dbcecd7
apex-onebotnetchromiumciscocrypto-drainerdrupalfirst-vpnfraudjfmbackdoorkimwolflaw-enforcementmicrosoft-defenderphishingrcesecure-workloadshowboatsql-injectiontech-support-scamtrend-microubiquitiunifi-osvpn-takedownvulnerabilityzero-day
What happened
A roundup of security news: Dutch authorities seized 800 servers and arrested two linked to a hosting firm facilitating cyberattacks and disinformation; U.S./Canadian forces arrested a suspected KimWolf DDoS botnet operator and police seized the 'First VPN' service used in ransomware/data theft. Multiple high-severity vulnerabilities and actively exploited zero-days were reported across major products — Trend Micro Apex One zero-day, a critical SQL injection in Drupal now under attack, three maximum-severity UniFi OS bugs from Ubiquiti, a maximum-severity Cisco Secure Workload flaw, Microsoft/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 7558d088acb2863e81a7a0a6b7cfdc2630e4f061d4657df1c0f739a22dbcecd7
- Enrichment time
- 2026-05-22T19:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.