conv.

← The whole story
Security
Cloudflare's Q3 2026 report: DDoS attacks surge 208% but mega-attacks collapse

Report links drop in mega-attacks to early-2026 botnet takedowns

Hyper-volumetric attacks above 1 Tbps fell to 251 in Q3 from 805 in Q2, which Cloudflare attributes to law enforcement dismantling the Aisuru, KimWolf, JackSkid and Mossad IoT botnets earlier in 2026; CLDAP reflection attacks collapsed to 0.05% of attacks after a +580% surge in H1, while DNS amplification and other UDP floods grew sharply.

Report links drop in mega-attacks to early-2026 botnet takedowns
blog.cloudflare.com

“Cloudflare autonomously mitigated 18.2 million network-layer DDoS attacks and 14.4 trillion HTTP DDoS requests.”

Cloudforce One, Cloudflare threat intelligence unit · rss ↗

Cloudflare Internet infrastructure and security companyCloudforce One Cloudflare's threat intelligence organizationDDoS-for-hire 'booter' operators AttackersLaw enforcement agencies Investigators

The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump

Peak 2 pieces in 3h at Oct 29, 8 AM; 6 pieces over 14 days (1 article · 5 posts) Oct 29, 8 AM — 2 pieces · 1 article · 1 post — Newswires 1, Hacker News 1Oct 29, 11 AM — quietOct 29, 2 PM — quietOct 29, 5 PM — quietOct 29, 8 PM — quietOct 29, 11 PM — quietOct 30, 2 AM — quietOct 30, 5 AM — quietOct 30, 8 AM — 1 piece · 1 post — Mastodon 1Oct 30, 11 AM — quietOct 30, 2 PM — quietOct 30, 5 PM — quietOct 30, 8 PM — quietOct 30, 11 PM — quietOct 31, 2 AM — quietOct 31, 5 AM — quietOct 31, 8 AM — quietOct 31, 11 AM — quietOct 31, 2 PM — 1 piece · 1 post — Mastodon 1Oct 31, 5 PM — quietOct 31, 8 PM — quietOct 31, 11 PM — quietNov 1, 1 AM — 1 piece · 1 post — Mastodon 1Nov 1, 4 AM — quietNov 1, 7 AM — quietNov 1, 10 AM — quietNov 1, 1 PM — quietNov 1, 4 PM — 1 piece · 1 post — Mastodon 1Nov 1, 7 PM — quietNov 1, 10 PM — quietNov 2, 1 AM — quietNov 2, 4 AM — quietNov 2, 7 AM — quietNov 2, 10 AM — quietNov 2, 1 PM — quietNov 2, 4 PM — quietNov 2, 7 PM — quietNov 2, 10 PM — quietNov 3, 1 AM — quietNov 3, 4 AM — quietNov 3, 7 AM — quietNov 3, 10 AM — quietNov 3, 1 PM — quietNov 3, 4 PM — quietNov 3, 7 PM — quietNov 3, 10 PM — quietNov 4, 1 AM — quietNov 4, 4 AM — quietNov 4, 7 AM — quietNov 4, 10 AM — quietNov 4, 1 PM — quietNov 4, 4 PM — quietNov 4, 7 PM — quietNov 4, 10 PM — quietNov 5, 1 AM — quietNov 5, 4 AM — quietNov 5, 7 AM — quietNov 5, 10 AM — quietNov 5, 1 PM — quietNov 5, 4 PM — quietNov 5, 7 PM — quietNov 5, 10 PM — quietNov 6, 1 AM — quietNov 6, 4 AM — quietNov 6, 7 AM — quietNov 6, 10 AM — quietNov 6, 1 PM — quietNov 6, 4 PM — quietNov 6, 7 PM — quietNov 6, 10 PM — quietNov 7, 1 AM — quietNov 7, 4 AM — quietNov 7, 7 AM — quietNov 7, 10 AM — quietNov 7, 1 PM — quietNov 7, 4 PM — quietNov 7, 7 PM — quietNov 7, 10 PM — quietNov 8, 1 AM — quietNov 8, 4 AM — quietNov 8, 7 AM — quietNov 8, 10 AM — quietNov 8, 1 PM — quietNov 8, 4 PM — quietNov 8, 7 PM — quietNov 8, 10 PM — quietNov 9, 1 AM — quietNov 9, 4 AM — quietNov 9, 7 AM — quietNov 9, 10 AM — quietNov 9, 1 PM — quietNov 9, 4 PM — quietNov 9, 7 PM — quietNov 9, 10 PM — quietYesterday, 1 AM — quietYesterday, 4 AM — quietYesterday, 7 AM — quietYesterday, 10 AM — quietYesterday, 1 PM — quietYesterday, 4 PM — quietYesterday, 7 PM — quietYesterday, 10 PM — quietToday, 1 AM — quietToday, 4 AM — quietToday, 7 AM — quietToday, 10 AM — quietToday, 1 PM — quietToday, 4 PM — quietToday, 7 PM — quiet ◂ 1 earlier234
Oct 30Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9yesterdaynow · 10:29 PM ET

Reported in the same hours no headline names this development itself — these 1 claim were published in its stretch

  1. first by Cloudflare Blog, 13d ago

All 4 developments of Cloudflare's Q3 2026 report: DDoS attacks surge 208% but… →

NewswiresHacker NewsMastodon