Authorities seize 800 servers used for cyberattacks and disinformation
2026-05-25T14:51:45Z•9ce908182c67ce8af92f3f01e65d5898b61f7f7cd164d0896a1f1126d3702b53
AI-powered vulnerability researchGoogle API keysNGINX exploitationOpenHackRussia-linked infrastructureTanStackVS Code extensionVerizon DBIRWordPress plugin vulnerabilitiesrisk translationsanctions evasionserver seizureshadow AIstate cybersecurity programssupply chain compromise
What happened
A batch of Help Net Security stories highlights active threat activity and shifting defensive priorities: Dutch authorities arrested two men and seized ~800 servers from a hosting provider allegedly supporting Russian cyberattacks, disinformation and sanctions-evasion. Multiple supply-chain and tooling compromises were reported — GitHub and Grafana incidents traced to a poisoned VS Code extension and TanStack supply-chain compromises, and a critical NGINX vulnerability is being exploited in the wild. Research/attack automation is accelerating: an OpenHack open-source AI-driven vulnerability-re
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 9ce908182c67ce8af92f3f01e65d5898b61f7f7cd164d0896a1f1126d3702b53
- Enrichment time
- 2026-05-25T14:51:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.