Back www.cloudflare.com

Cloudforce One

www.cloudflare.com • October 29, 2026

An embedded team of world-class threat researchers who analyze intelligence pulled from Cloudflare’s global network – one of the largest and most interconnected networks in the world – furthering our mission to help build a better Internet.

What the world's Internet traffic reveals the 2026 threat landscape

Latest threat research

Threat insights from Cloudflare’s global network

Cloudflare participates in global operation to disrupt the yam.ink illicit access shop

Cloudflare participates in global operation to disrupt EvilTokens Phishing-as-a-Service

Adversarial deception: a study of indirect prompt code injection

Cloudflare participates in global operation to disrupt Tycoon 2FA

Vercel-hosted RMM abuse campaign evolves with Telegram C2 for victim filtering

Aisuru botnet: Early October attacks escalate into record-setting DDoS activity

Get updates from Cloudforce One

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Surge in DDoS Attacks: 18.2 Million Mitigated in Q3 2026 Cloudflare's Q3 2026 DDoS Threat Report reveals a staggering 208% increase in network-layer DDoS attacks, totaling 18.2 million mitigated attacks, while attacks exceeding 1 Tbps fell by 69% to 251. The report attributes the decline in large attacks to law enforcement actions against major IoT botnets earlier in the year. Most attacks were short-lived, with 96% lasting under 10 minutes and 98% remaining below 1 Gbps, indicative of DDoS-for-hire services. The U.S. regained its position as the most targeted country, with significant increases in attacks against Canada and Israel. Attack methods shifted dramatically, with a 215% rise in DNS amplification attacks and a 122% increase in UDP floods, while CLDAP floods plummeted by 99.5%. The report emphasizes that while large attacks are declining, the overall DDoS threat remains significant due to the high frequency of smaller attacks. 16 sources 55

Extracted Entities

Platforms (1)

Tools (1)

EvilTokens

Cloudforce One

The full story

Extracted Entities

Attack Types (2)

Campaigns (2)

Domains (1)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)