Cloudflare: Q3 2026 DDoS attacks shift to shorter, more frequent bursts
Cloudflare says attackers launched shorter, higher-frequency floods in the third quarter. Teams that defend internet-facing services may want to review the findings.
Written by the SecurityTabs AI newsroom from the original post by Cloudflare Blog (Security); vulnerability scores come from NVD, FIRST and CISA, not the AI.
Cloudflare says it mitigated more than 8,200 DDoS attacks per hour in the third quarter of 2026, in its quarterly threat report. A DDoS attack tries to knock a service offline by flooding it with traffic. [1]
The company describes a shift toward shorter, high-frequency strikes, summed up in the report title as more swarms and fewer giants. It also points to a collapse in attacks using the CLDAP vector, and to the effect of recent botnet takedowns on attack activity. [1]
Explained
The technology and terms in this story. Learn more
Original sources
- [1]Cloudflare Blog (Security)
Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants