Canadian Man Arrested for Operating Kimwolf Botnet

Multiple high-severity security events reported: Canadian arrest of a suspected Kimwolf botnet operator and disruption/arrest of an administrator of the 'First VPN' cybercrime service used by ransomware groups. Several critical software vulnerabilities were disclosed and patched — TrendAI Apex One directory traversal (CVE-2026-34926) exploited in the wild, a highly critical unauthenticated Drupal flaw exposing sites to info disclosure/privilege escalation/RCE (CVE-2026-9082), and a critical Cisco Secure Workload REST API auth/validation flaw granting Site Admin privileges; Microsoft also fixed