Welcome to the 26th edition of Cloudflare's DDoS Threat Report. This edition covers the third quarter of 2026 — July, August, and September — and returns the series to its quarterly cadence following the combined H1 2026 volume. The analysis is produced by Cloudforce One , Cloudflare's Threat Intelligence…
Live Feed
Every headline from 99 sources, newest first. Checks for new items every minute.
Auto-refresh on
Cloudflare DDoS Threat Report 2026 Q3: More swarms, fewer giants
The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws
This Cyble Research & Intelligence Labs (CRIL) weekly vulnerability report covers two views of risk: what attackers tried against Cyble's global honeypot sensors, and what the Cybersecurity and Infrastructure Security Agency (CISA) disclosed for industrial control systems (ICS). The Cyble Global Sensor Intelligence…
CVEsManufacturingNorth America
CVE-2026-63030EPSS 96exploitedCVE-2026-60137EPSS 93exploitedCVE-2026-44825EPSS 90exploitedCVE-2026-9198EPSS 98exploitedCVE-2025-3248EPSS 100exploited
Google’s Continued Disruption of Malicious Residential Proxy Networks
Background Today, in coordination with the FBI, Lumen, and others, Google took action against the NetNut residential proxy network, also known as Popa. This action builds on our disruption of the IPIDEA proxy network that took place in January 2026, and is a continuation of Google’s objective to dismantle malicious…