Cloudflare blocked 18 million DDoS attacks in the third quarter of 2026

Short and Swift Digital Assaults Surge

A recent industry report reveals a massive shift in malicious internet traffic during the third quarter of 2026. Security systems faced a huge jump in brief, low-bandwidth attacks. Most of these disruptive events lasted under ten minutes and stayed below a moderate data threshold. Experts link these methods to paid attack services rented out by malicious actors. These quick bursts are enough to overwhelm an unprotected web server.

Law Enforcement Disrupts Massive Botnet Networks

While smaller attacks grew in frequency, extremely large disruptions involving massive data volumes dropped significantly. Authorities successfully dismantled several major networks of infected connected devices earlier in the year. Despite this enforcement action, criminals quickly deployed new variants to keep their operations running. These older botnet strains still generated a massive share of total mitigated traffic during the period.

Shifting Tactics and Global Targets

Attackers also changed how they flood target networks with junk traffic. Older methods using specific directory protocols nearly vanished from use. Instead, bad actors pivoted heavily toward domain name system amplification and other connectionless data streams to overwhelm victims. Geographically, the United States reclaimed the top spot as the most targeted nation, followed closely by China and Indonesia. Canada and Israel also saw notable jumps in incoming security threats amid regional tensions.