conv.

All stories
SecurityQuiet 10d · day 13

Cloudflare's Q3 2026 report: DDoS attacks surge 208% but mega-attacks collapse

Cloudflare mitigated 18.2 million network-layer DDoS attacks in Q3 2026 as short, high-frequency 'booter' strikes replaced the hyper-volumetric attacks of early 2026.

newest coverage 10d agosummary written 10d ago6 pieces3 likes & upvotes NewswiresHacker NewsMastodon

What to know

  • Cloudflare mitigated 18.2 million network-layer DDoS attacks and 14.4 trillion HTTP DDoS requests in Q3 2026, up 208% year-over-year and 38% quarter-over-quarter.
  • Hyper-volumetric attacks above 1 Tbps fell 69% (805 to 251) following early-2026 law enforcement takedowns of the Aisuru, KimWolf, JackSkid and Mossad IoT botnets.
  • Attack style shifted toward short-burst, high-frequency 'booter'-style strikes — 96% lasted under ten minutes — targeting software, gambling and IT sectors.
  • Vector mix shifted sharply: CLDAP amplification collapsed to 0.05% of attacks after a mid-year surge, while DNS amplification and generic UDP floods grew; Canada jumped to the 6th most-targeted country amid bilateral trade disputes.

Cloudflare Internet infrastructure and security companyCloudforce One Cloudflare's threat intelligence organizationDDoS-for-hire 'booter' operators AttackersLaw enforcement agencies Investigators

Cloudflare's Q3 2026 report: DDoS attacks surge 208% but mega-attacks collapse
blog.cloudflare.com

How it unfolded 4 developments, newest first · click a bar or a number to jump articlesposts

Peak 2 pieces in 3h at Oct 29, 8 AM; 6 pieces over 14 days (1 article · 5 posts) Oct 29, 8 AM — 2 pieces · 1 article · 1 post — Newswires 1, Hacker News 1Oct 29, 11 AM — quietOct 29, 2 PM — quietOct 29, 5 PM — quietOct 29, 8 PM — quietOct 29, 11 PM — quietOct 30, 2 AM — quietOct 30, 5 AM — quietOct 30, 8 AM — 1 piece · 1 post — Mastodon 1Oct 30, 11 AM — quietOct 30, 2 PM — quietOct 30, 5 PM — quietOct 30, 8 PM — quietOct 30, 11 PM — quietOct 31, 2 AM — quietOct 31, 5 AM — quietOct 31, 8 AM — quietOct 31, 11 AM — quietOct 31, 2 PM — 1 piece · 1 post — Mastodon 1Oct 31, 5 PM — quietOct 31, 8 PM — quietOct 31, 11 PM — quietNov 1, 1 AM — 1 piece · 1 post — Mastodon 1Nov 1, 4 AM — quietNov 1, 7 AM — quietNov 1, 10 AM — quietNov 1, 1 PM — quietNov 1, 4 PM — 1 piece · 1 post — Mastodon 1Nov 1, 7 PM — quietNov 1, 10 PM — quietNov 2, 1 AM — quietNov 2, 4 AM — quietNov 2, 7 AM — quietNov 2, 10 AM — quietNov 2, 1 PM — quietNov 2, 4 PM — quietNov 2, 7 PM — quietNov 2, 10 PM — quietNov 3, 1 AM — quietNov 3, 4 AM — quietNov 3, 7 AM — quietNov 3, 10 AM — quietNov 3, 1 PM — quietNov 3, 4 PM — quietNov 3, 7 PM — quietNov 3, 10 PM — quietNov 4, 1 AM — quietNov 4, 4 AM — quietNov 4, 7 AM — quietNov 4, 10 AM — quietNov 4, 1 PM — quietNov 4, 4 PM — quietNov 4, 7 PM — quietNov 4, 10 PM — quietNov 5, 1 AM — quietNov 5, 4 AM — quietNov 5, 7 AM — quietNov 5, 10 AM — quietNov 5, 1 PM — quietNov 5, 4 PM — quietNov 5, 7 PM — quietNov 5, 10 PM — quietNov 6, 1 AM — quietNov 6, 4 AM — quietNov 6, 7 AM — quietNov 6, 10 AM — quietNov 6, 1 PM — quietNov 6, 4 PM — quietNov 6, 7 PM — quietNov 6, 10 PM — quietNov 7, 1 AM — quietNov 7, 4 AM — quietNov 7, 7 AM — quietNov 7, 10 AM — quietNov 7, 1 PM — quietNov 7, 4 PM — quietNov 7, 7 PM — quietNov 7, 10 PM — quietNov 8, 1 AM — quietNov 8, 4 AM — quietNov 8, 7 AM — quietNov 8, 10 AM — quietNov 8, 1 PM — quietNov 8, 4 PM — quietNov 8, 7 PM — quietNov 8, 10 PM — quietNov 9, 1 AM — quietNov 9, 4 AM — quietNov 9, 7 AM — quietNov 9, 10 AM — quietNov 9, 1 PM — quietNov 9, 4 PM — quietNov 9, 7 PM — quietNov 9, 10 PM — quietYesterday, 1 AM — quietYesterday, 4 AM — quietYesterday, 7 AM — quietYesterday, 10 AM — quietYesterday, 1 PM — quietYesterday, 4 PM — quietYesterday, 7 PM — quietYesterday, 10 PM — quietToday, 1 AM — quietToday, 4 AM — quietToday, 7 AM — quietToday, 10 AM — quietToday, 1 PM — quietToday, 4 PM — quiet ◂ 1 earlier234
Oct 30Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9now · 7:41 PM ET
  1. 4

    Report continues circulating with focus on 69% drop in mega-attacks

    Further social sharing of the Cloudflare report emphasizes that attacks exceeding 1 Tbps fell 69% even as overall network-layer attacks rose 38% from Q2, keeping both the growth and the hyper-volumetric decline in circulation.

    “Q3 network-layer attacks rose 38% from Q2, while attacks exceeding 1 Tbps fell 69%.”
    — ransomnews@poliversity.it
    • patrickcmiller@infosec.exchange

      Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38% https:// thehackernews.com/2026/10/clou dflare-reports-182-million-network.html

      patrickcmiller@infosec.exchangeMastodon10d agoview on Mastodon ↗
  2. 3

    The Hacker News headlines the 38% quarter-over-quarter rise

    The Hacker News covers the report under a headline emphasizing the 38% quarter-over-quarter increase in network-layer attacks, framing the quarterly growth rate distinctly from the 208% year-over-year figure.

    “Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%…”
    — The Hacker News (shared via @sambowne)
    • sambowne@infosec.exchange

      Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38% https:// thehackernews.com/2026/10/clou dflare-reports-182-million-network.html

      sambowne@infosec.exchangeMastodon11d agoview on Mastodon ↗
  3. 2

    GBHackers highlights that 96% of attacks lasted under ten minutes

    Coverage of the report circulating on Mastodon notes that network-layer attacks rose 208% year over year and that 96% of attacks lasted less than ten minutes, underscoring the shift toward short-burst booter-style strikes.

    “Network-layer attacks rose 208% year over year in Q3; 96% lasted less than ten minutes.”
    — ransomnews@poliversity.it
  4. 1

    Report links drop in mega-attacks to early-2026 botnet takedowns

    Hyper-volumetric attacks above 1 Tbps fell to 251 in Q3 from 805 in Q2, which Cloudflare attributes to law enforcement dismantling the Aisuru, KimWolf, JackSkid and Mossad IoT botnets earlier in 2026; CLDAP reflection attacks collapsed to 0.05% of attacks after a +580% surge in H1, while DNS amplification and other UDP floods grew sharply.

    “Cloudflare autonomously mitigated 18.2 million network-layer DDoS attacks and 14.4 trillion HTTP DDoS requests.”
    — Cloudforce One, Cloudflare threat intelligence unit · source
  5. background

    Cloudflare publishes Q3 2026 DDoS Threat Report — Cloudforce One's 26th quarterly report finds Cloudflare autonomously mitigated 18.2 million network-layer DDoS attacks (+208% year-over-year) and 14.4 trillion HTTP DDoS requests, totaling 272.6 PB and 95.1 PB of traffic respectively — about one network-layer attack every 0.44 seconds.

What people are saying 0 voices from 0 sites · best of 2 · verbatim