Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
2026-06-01T07:23:28Z•207f0575a892676ed311f53aa822c382faf945b9ce7d97f7171a71593d337a3a
AWS GovCloudAdobe Reader","SharePoint zero-day","BlueHammer","router token-hCISACanvas breachDDoSGitHubGoogle ChromeIoT botnetKimwolf botnetMicrosoftNetherlandsPatch TuesdayRussian state actorsScattered SpiderStark Industries Solutionsanti-DDoS firmbotnet enablingcongressional inquirycredentials leakdata extortiondata leakeducation sectorhosting abuseserver seizurezero-day patches
What happened
A cluster of high-impact cyber incidents and law-enforcement actions were reported across April–May 2026: Dutch authorities seized ~800 servers and arrested two co-owners of hosting firms accused of providing infrastructure for Russian intelligence influence and cyberattacks (linked to sanctioned ISP Stark Industries Solutions); a CISA contractor publicly exposed AWS GovCloud keys and extensive internal secrets on GitHub, prompting a breach containment effort and congressional inquiries; Canadian police arrested the alleged Kimwolf botnet operator who built an IoT botnet used in massive DDoS,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 207f0575a892676ed311f53aa822c382faf945b9ce7d97f7171a71593d337a3a
- Enrichment time
- 2026-06-01T07:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.