Kiprinform Prolonged DDoS Attack Hits Cyprus Bank for 200 Hours
Article Content
- •A DDoS attack on a Cyprus bank lasted 200 hours, significantly longer than previous incidents.
- •Financial technology is the most targeted sector, with 31.3% of all DDoS attacks recorded.
- •Regulatory pressure is increasing for financial firms to demonstrate resilience under DORA.
A distributed denial-of-service (DDoS) attack targeted a bank in Cyprus, lasting 200 hours during the third quarter of 2026, according to Qrator Labs. This incident is significantly longer than any recorded attacks in 2025 and more than 2.5 times the duration of the longest attack in the previous quarter. The financial technology sector was the most affected, accounting for 31.3% of all DDoS attacks in that period. The attack underscores the growing risks for financial institutions in Cyprus, which is a hub for online trading and financial services. Regulators are emphasizing the need for firms to demonstrate resilience against such cyber incidents, in line with the EU's Digital Operational Resilience Act (DORA). New reporting requirements under DORA mandate that firms quantify and report the financial impact of major incidents. The scale of DDoS attacks is also increasing, with the largest botnet observed reaching 3.56 million devices, a 70% increase from the previous quarter.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What was the duration of the DDoS attack?
Which sectors are most affected by DDoS attacks?
What are the new reporting requirements under DORA?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects…
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…