Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks

2026-05-30T07:23:30Z5c448ef3c1c4366fb25264c35cc28fd4c1029fdd0f0cdc16737c1eb726dc002a
aws-govcloudbotnetcanvas-breachcisacredentials-exposuredata-extortiondata-leakddoshosting-abusekimwolflaw-enforcementmicrosoft-office-token-theftpatch-tuesdayrussia-linked-operationszero-day

What happened

Multiple high-impact cyber incidents and law-enforcement actions: Dutch authorities seized ~800 servers and arrested two co-owners of hosting firms alleged to have facilitated Russia-linked cyberattacks and influence operations. The U.S. CISA is responding to a major credential exposure after a contractor published AWS GovCloud keys and internal secrets to a public GitHub repo, prompting Congressional inquiries. Other notable items: the alleged Kimwolf IoT botnet operator was arrested and charged in Canada and the U.S.; the Canvas education platform suffered a widespread data-extortion attack,

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
5c448ef3c1c4366fb25264c35cc28fd4c1029fdd0f0cdc16737c1eb726dc002a
Enrichment time
2026-05-30T07:23:30Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.