Hackers Launch 8,200 DDoS Attacks Every Hour, Cloudflare’s Latest Report Reveals
Cloudflare reports 8,200+ DDoS attacks hourly in Q3 2026, with attackers favoring short bursts.
Cloudflare's Q3 2026 DDoS Threat Report reveals an average of over 8,200 network-layer DDoS attacks per hour, a 208% increase year-over-year. Attackers are increasingly using short, frequent bursts, with 96% lasting under ten minutes and 98% below 1 Gbps, overwhelming services that lack automated defenses. While massive terabit-scale attacks decreased, Mirai-related activity and UDP floods remain significant threats, with the US becoming the most targeted location.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Cloudflare?
Get an email when a new story names Cloudflare, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonCloudflare's Q3 2026 report exposes a dramatic 208% year-over-year surge in network-layer DDoS attacks, averaging over 8,200 per hour. The most dangerous shift is toward short, sub-10-minute bursts below 1 Gbps — specifically designed to evade traditional threshold-based detection and exhaust services before human responders can react. Organizations relying on manual mitigation or legacy static rules are effectively defenseless against this pace and volume. The continued dominance of Mirai-based botnets and UDP floods highlights that well-known attack vectors remain devastatingly effective when defenses are not automated and continuously tuned.
What helps against this
How we list vendors
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- Web application firewall and DDoS protection
Websites and APIs stay up, and common web attacks are filtered before they reach them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Mirai