Ethical Hacking News
Cloudflare has reported a record-breaking 18.2 million network-layer DDoS attacks in Q3 2026, up 38% from the same period last year. The report attributes the surge to DDoS-for-hire booter services and notes a decline in hyper-volumetric attacks. Despite this, the threat remains far from neutralized, with new variants emerging. The report provides insights into the most attacked countries and industries, highlighting the ongoing struggle to mitigate DDoS attacks.
Cloudflare reported 18.2 million network-layer DDoS attacks in Q3 2026, a 38% increase from the previous year. The company autonomously mitigated 14.4 trillion HTTP DDoS requests, equivalent to 197,400 attacks per day. DDoS-for-hire services are responsible for hundreds of thousands of attacks, with a 208% surge in low-bandwidth attacks. Hyper-volumetric attacks decreased by 69% from the previous quarter, likely due to law enforcement actions. DNS amplification attacks jumped 215% to account for 3.43% of all network-layer attacks. The most targeted industries include media, IT services, gambling, computer software, and telecommunications. The US, China, Indonesia, UK, and Türkiye were the most attacked countries.
In a stark reminder of the ever-present threat landscape, Cloudflare, a leading web infrastructure and security company, has recently released its quarterly DDoS threat report, which revealed a staggering 18.2 million network-layer distributed denial-of-service (DDoS) attacks in the third quarter of 2026. This represents a 38% increase from the same period last year, underscoring the growing menace of DDoS attacks on the internet.
The report, which was shared with The Hacker News, provides a comprehensive breakdown of the DDoS attacks that were mitigated by Cloudflare during Q3 2026. According to the report, Cloudflare autonomously mitigated 14.4 trillion HTTP DDoS requests, which translates to 197,400 attacks per day, or one attack every 0.44 seconds. This is a significant increase from the 13.2 million and 10.0 million L3 DDoS attacks recorded in Q2 and Q1 2026, respectively.
The report attributes the surge in DDoS attacks to DDoS-for-hire booter or stresser services, which are responsible for hundreds of thousands of attacks. These services allow individuals or organizations to launch DDoS attacks against their targets without requiring extensive technical expertise. The report notes that these services have become increasingly popular among threat actors, who use them to launch short-burst, low-bandwidth attacks lasting under 10 minutes and 1 Gbps, which surged by 208% from the previous quarter.
However, the report also highlights a decline in hyper-volumetric attacks exceeding 1 Tbps, which decreased by 69% from the previous quarter. This is likely due to law enforcement actions against several high-profile DDoS-for-hire services earlier this year. Despite this decline, the report warns that the threat remains far from neutralized, given the emergence of new variants like Dysphoria and Evooo1Bot.
Another notable shift highlighted in the report is the decline in Connectionless Lightweight Directory Access Protocol (CLDAP) floods, while DNS amplification jumped 215% to account for 3.43% of all network-layer attacks. The most targeted industries include media, production, and publishing; information technology and services; gambling and casinos; computer software; and telecommunications providers.
The report also provides insights into the most attacked countries during the period, with the U.S., China, Indonesia, the U.K., and Türkiye emerging as the most attacked countries. Canada and Israel entered the top 10 ranking, fueled by attacks targeting Canada's retail, telecommunications, and marketing sectors.
The report's findings serve as a stark reminder of the ongoing struggle to mitigate DDoS attacks, which remain a significant threat to internet infrastructure and security. As the threat landscape continues to evolve, it is essential for organizations to remain vigilant and take proactive measures to protect themselves against these types of attacks.
Related Information:
https://www.ethicalhackingnews.com/articles/Cloudflare-Reports-Record-Breaking-182-Million-Network-Layer-DDoS-Attacks-in-Q3-Up-38-from-Last-Quarter-ehn.shtml
https://thehackernews.com/2026/10/cloudflare-reports-182-million-network.html
Published: Sat Oct 31 01:49:12 2026 by llama3.2 3B Q4_K_M
