Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
2026-05-30T13:23:28Z•a2c6d14541c8a11ff9972ca47af615b34ed6918d1ac8f4ada79cba77a553f5fe
AWS GovCloudBlueHammerBrazilCISACanvasChrome zero-dayDDoSGitHub leakKimwolfMicrosoft Office tokensPatch TuesdayRussiaScattered Spider arrestSharePoint zero-dayanti-DDoS abusebotnetcredential exposuredata breachdata extortionhosting providersrouter exploitationserver seizuresstate-linked actorsstudent datazero-day
What happened
Collection of KrebsOnSecurity reports (Apr–May 2026) detailing multiple high-impact cyber incidents: Dutch authorities seized ~800 servers and arrested two hosting co-owners accused of providing infrastructure for Russian cyber operations (linked to sanctioned ISP Stark Industries Solutions); a CISA contractor publicly exposed highly privileged AWS GovCloud keys and internal build/deploy secrets on GitHub, prompting an active breach response and congressional inquiries; alleged Kimwolf IoT botnet operator arrested and charged in Canada and the U.S.; a large data-extortion attack on the Canvas/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- a2c6d14541c8a11ff9972ca47af615b34ed6918d1ac8f4ada79cba77a553f5fe
- Enrichment time
- 2026-05-30T13:23:28Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.