Skip to content
Canonical Websites Disrupted in Second DDoS Attack This Year

Canonical Websites Disrupted in Second DDoS Attack This Year

Securityweek •Eduard Kovacs • October 12, 2026

Canonical’s websites were disrupted last week by a distributed denial-of-service (DDoS) attack, months after a larger attack hit the Ubuntu maker’s infrastructure.

The company confirmed the attack on October 8 in a post on the Ubuntu Discourse forum. “Canonical’s websites are under a sustained distributed denial of service attack,” the company said, adding that some services might not be reachable at times.

The disruption was limited to Canonical’s primary web properties, OMG! Ubuntu reported. These included ubuntu.com, canonical.com, the Ubuntu blog and developer site, and Ubuntu’s security advisory pages and API.

Developer-facing services such as Launchpad and the Snap Store did not appear to be affected.

Canonical said on October 9 that its team was still bringing affected services back, though most were accessible again. OMG! Ubuntu put the total downtime at a little over four hours.

The company has not publicly shared information on the size or origin of the cyberattack. No one appears to have taken credit for the DDoS attack.

Canonical was hit by a more disruptive attack in late April. Launchpad and the Snap Store were among the services taken down, and some users could not install Ubuntu updates. The company described that incident as a “sustained, cross-border attack.”

A hacktivist group calling itself The Islamic Cyber Resistance in Iraq – 313 Team claimed responsibility for that attack. It’s unclear whether the two incidents are connected.

Related : NightmareStresser DDoS Service Disrupted in International Operation

Related : 53 DDoS Domains Taken Down by Law Enforcement

Related : After Bluesky, Mastodon Targeted in DDoS Attack

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

More from Eduard Kovacs

Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security

Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication

US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward

TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws

Oracle Health Data Breach Tally Climbs to Nearly 20 Million

Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts

Advantest Discloses Data Breach Months After Ransomware Attack

Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US

iRhythm Data Breach Impacts at Least 360,000 People

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe

Critical SonicWall Vulnerability Exploited Days After Disclosure

Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks

In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years

Webinar: AI Is Accelerating Risk. Can Your IT Operations Keep Up?

Learn Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.

Virtual Event: Zero Trust & Identity Strategies Summit 2026

Join as we decipher the world of zero trust and war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.

Flipboard Whatsapp Whatsapp Email

Extracted Entities

Attack Types (1)

Companies (2)

Countries (1)