Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices

A collection of high-impact cyber developments: Dutch authorities dismantled a massive botnet of ~17 million infected devices, while multiple actively exploited and high-severity vulnerabilities were reported and patched. Notable faults include PAN-OS GlobalProtect authentication bypass (CVE-2026-0257) under active exploitation, Marimo compromise using CVE-2026-39987 enabling credential theft and LLM-driven post-exploitation, a critical Gogs RCE (CVSS 9.4) allowing code execution, and continued abuse of a critical FortiClient EMS flaw to deploy the EKZ Infostealer. Additional supply-chain and曝