Cloudflare Q3 2026: 18.2M Network-Layer DDoS Attacks, Up 38%

Sat, 31 Oct 2026 16:03:46 +0000

Engineer — Learn: Volume benchmarks are useful context for capacity planning and DDoS mitigation sizing, but no new attack technique or actionable configuration change emerges from this report.
SOC/IR — Learn: Useful for calibrating alert thresholds and briefing teams on DDoS trend baselines, but no IOCs, TTPs, or detection actions are surfaced.
Leader — Learn: The 38% year-over-year increase is board-deck-ready benchmarking data to justify DDoS mitigation investment, but no immediate action is required.

Google GTIG: AI Doubles Vuln Disclosures, Exploitation Rate Nearly Doubles

Wed, 30 Sep 2026 16:48:49 +0000

Engineer — Learn: Industry-scale data showing exploitation rates nearly doubled and AI-discovered vulns skew toward RCE — a signal to review patch SLA targets and triage priority frameworks, but no specific software or configuration to change today.
SOC/IR — Learn: The compression between disclosure and exploitation (18 exploited/month vs 10.5 in 2025) is useful triage context — detection coverage gaps close faster now — but the report provides no IOCs, TTPs, or specific campaigns to action against.
Leader — Plan: Statistically grounded data showing doubled exploitation rates and AI-driven growth in RCE-class findings warrants updating the risk register and briefing leadership on the need to tighten patch SLA expectations across engineering teams this quarter.