Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
2026-05-30T07:23:30Z•5c448ef3c1c4366fb25264c35cc28fd4c1029fdd0f0cdc16737c1eb726dc002a
aws-govcloudbotnetcanvas-breachcisacredentials-exposuredata-extortiondata-leakddoshosting-abusekimwolflaw-enforcementmicrosoft-office-token-theftpatch-tuesdayrussia-linked-operationszero-day
What happened
Multiple high-impact cyber incidents and law-enforcement actions: Dutch authorities seized ~800 servers and arrested two co-owners of hosting firms alleged to have facilitated Russia-linked cyberattacks and influence operations. The U.S. CISA is responding to a major credential exposure after a contractor published AWS GovCloud keys and internal secrets to a public GitHub repo, prompting Congressional inquiries. Other notable items: the alleged Kimwolf IoT botnet operator was arrested and charged in Canada and the U.S.; the Canvas education platform suffered a widespread data-extortion attack,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 5c448ef3c1c4366fb25264c35cc28fd4c1029fdd0f0cdc16737c1eb726dc002a
- Enrichment time
- 2026-05-30T07:23:30Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.