Back Securityweek Canonical Websites Disrupted in Second DDoS Attack This Year
Canonical’s websites were disrupted last week by a distributed denial-of-service (DDoS) attack, months after a larger attack hit the Ubuntu maker’s infrastructure.
The company confirmed the attack on October 8 in a post on the Ubuntu Discourse forum. “Canonical’s websites are under a sustained distributed denial of service attack,” the company said, adding that some services might not be reachable at times.
The disruption was limited to Canonical’s primary web properties, OMG! Ubuntu reported. These included ubuntu.com, canonical.com, the Ubuntu blog and developer site, and Ubuntu’s security advisory pages and API.
Developer-facing services such as Launchpad and the Snap Store did not appear to be affected.
Canonical said on October 9 that its team was still bringing affected services back, though most were accessible again. OMG! Ubuntu put the total downtime at a little over four hours.
The company has not publicly shared information on the size or origin of the cyberattack. No one appears to have taken credit for the DDoS attack.
Canonical was hit by a more disruptive attack in late April. Launchpad and the Snap Store were among the services taken down, and some users could not install Ubuntu updates. The company described that incident as a “sustained, cross-border attack.”
A hacktivist group calling itself The Islamic Cyber Resistance in Iraq – 313 Team claimed responsibility for that attack. It’s unclear whether the two incidents are connected.
Related : NightmareStresser DDoS Service Disrupted in International Operation
Related : 53 DDoS Domains Taken Down by Law Enforcement
Related : After Bluesky, Mastodon Targeted in DDoS Attack
Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.
More from Eduard Kovacs
Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward
TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws
Oracle Health Data Breach Tally Climbs to Nearly 20 Million
Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts
Advantest Discloses Data Breach Months After Ransomware Attack
Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
iRhythm Data Breach Impacts at Least 360,000 People
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
Critical SonicWall Vulnerability Exploited Days After Disclosure
Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks
In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years
Webinar: AI Is Accelerating Risk. Can Your IT Operations Keep Up?
Learn Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
Virtual Event: Zero Trust & Identity Strategies Summit 2026
Join as we decipher the world of zero trust and war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
Flipboard Whatsapp Whatsapp Email
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
