Ethical Hacking News
Canonical, the parent company of the popular Ubuntu operating system, has suffered its second DDoS attack in 2026, disrupting its main public websites for over four hours. The attack, which occurred on October 8, 2026, and lasted for over four hours, was described as a "sustained distributed denial of service" (DDoS) attack. The attack directly affected the most visible institutional domains, including canonical.com and ubuntu.com, as well as the official blog, the developer portal, assets.ubuntu.com, academy.canonical.com and sites linked to enterprise technologies such as jaas.ai and maas.io. The company's distributed infrastructure helped contain the damage, and software repositories and mirror servers remained available, allowing users to install updates. The incident highlights the ongoing threat of DDoS attacks and the importance of maintaining robust security measures to protect against such attacks.
Canonical, the parent company of Ubuntu, suffered its second DDoS attack in 2026, disrupting its main public websites. The attack, which lasted over four hours, affected the Ubuntu Security API and Livepatch services, but Launchpad and Snap Store remained online. The responsibility for the attack is currently unclear, unlike the April incident where a hacktivist group claimed responsibility. Canonical's distributed infrastructure helped contain the damage, and users were able to continue downloading and installing packages. The incident highlights the ongoing threat of DDoS attacks and the importance of maintaining robust security measures. Canonical's swift response to the attack demonstrates its commitment to maintaining the security and integrity of its products.
In a recent development that highlights the ongoing struggles of maintaining online security, Canonical, the parent company of the popular Ubuntu operating system, has suffered its second DDoS attack in 2026. The attack, which occurred on October 8, 2026, and lasted for over four hours, disrupted the company's main public websites, including ubuntu.com, canonical.com, the Ubuntu blog, the developer portal, and the security advisory pages and API. Although Launchpad and the Snap Store remained online throughout the incident, the attack temporarily disrupted the Ubuntu Security API and Livepatch services, affecting tools used to check security advisories and apply kernel patches without restarting systems.
The attack, which was described as a "sustained distributed denial of service" (DDoS) attack, directly affected the most visible institutional domains, including canonical.com and ubuntu.com, as well as the official blog, the developer portal, assets.ubuntu.com, academy.canonical.com and sites linked to enterprise technologies such as jaas.ai and maas.io. The company's distributed infrastructure helped contain the damage, and software repositories and mirror servers remained available, allowing users to install updates.
This attack differs from the April incident, which caused greater disruption by taking down Launchpad and the Snap Store and preventing some users from installing Ubuntu updates. In that incident, a hacktivist group called The Islamic Cyber Resistance in Iraq, also known as 313 Team, claimed responsibility. However, the responsibility for the October attack is currently unclear.
The October attack is the second DDoS attack to hit Canonical's infrastructure this year. The company had previously acknowledged the April incident and worked to resolve it. Despite the attack, Canonical's distributed infrastructure helped contain the damage, and users were able to continue downloading and installing packages even while the public websites were disrupted.
The incident highlights the ongoing threat of DDoS attacks and the importance of maintaining robust security measures to protect against such attacks. It also underscores the need for companies to stay vigilant and proactive in responding to security incidents.
Canonical's response to the attack was swift and effective, with the company acknowledging the outage on its status page and Ubuntu Discourse while engineers worked to limit the impact. The company's efforts to contain the damage and restore services to its users are a testament to its commitment to maintaining the security and integrity of its products.
In addition to the attack on Canonical, other recent developments in the world of cybersecurity have included the revelation of a new DDoS attack on SonicWall, a company that specializes in cybersecurity solutions. The attack, which was described as a "CVSS 10.0 SSRF flaw" attack, highlighted the importance of staying up-to-date with the latest security patches and best practices.
Other recent developments in the world of cybersecurity include the revelation of a new AI-powered threat actor, CyberXero, which used 51 AI agents to steal over 628,000 Ukrainian records. The attack highlights the growing threat of AI-powered threats and the need for companies to stay vigilant and proactive in responding to such threats.
Overall, the recent DDoS attack on Canonical highlights the ongoing threat of DDoS attacks and the importance of maintaining robust security measures to protect against such attacks. It also underscores the need for companies to stay vigilant and proactive in responding to security incidents.
Related Information:
https://www.ethicalhackingnews.com/articles/Canonical-Suffers-Second-DDoS-Attack-in-2026-Disrupting-Public-Websites-ehn.shtml
https://securityaffairs.com/200832/security/canonical-hit-by-second-ddos-attack-in-2026.html
Published: Mon Oct 12 15:58:22 2026 by llama3.2 3B Q4_K_M
