Dutch police disrupts botnet composed of 17 million devices

Multiple security developments: Dutch law enforcement and the Netherlands’ NCSC disrupted a botnet of ~17 million infected devices by taking 200 command servers offline. Active exploitation was observed against Fortinet FortiClient Enterprise Management Server (EMS) — CVE-2026-35616 — where attackers delivered a broad-spectrum infostealer by presenting a malicious payload as a Fortinet endpoint update and abusing FortiClient-managed VPN scripting workflows. Researchers disclosed FROST, an OPFS/SSD-timing fingerprinting technique that lets websites infer user activity from SSD behavior. A new,: