Cybercrime
Canonical Websites Disrupted in Second DDoS Attack This Year
The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal.
By
|
October 12, 2026 (7:58 AM ET)
- + Flipboard + Reddit [+ Whatsapp](https://web.whatsapp.com/send?text=Canonical Websites Disrupted in Second DDoS Attack This Year https://www.securityweek.com/canonical-websites-disrupted-in-second-ddos-attack-this-year/) [+ Whatsapp](whatsapp://send?text=Canonical Websites Disrupted in Second DDoS Attack This Year https://www.securityweek.com/canonical-websites-disrupted-in-second-ddos-attack-this-year/) + Email
Canonical’s websites were disrupted last week by a distributed denial-of-service (DDoS) attack, months after a larger attack hit the Ubuntu maker’s infrastructure.
The company confirmed the attack on October 8 in a post on the Ubuntu Discourse forum. “Canonical’s websites are under a sustained distributed denial of service attack,” the company said, adding that some services might not be reachable at times.
The disruption was limited to Canonical’s primary web properties, OMG! Ubuntu reported. These included ubuntu.com, canonical.com, the Ubuntu blog and developer site, and Ubuntu’s security advisory pages and API.
Developer-facing services such as Launchpad and the Snap Store did not appear to be affected.
Canonical said on October 9 that its team was still bringing affected services back, though most were accessible again. OMG! Ubuntu put the total downtime at a little over four hours.
The company has not publicly shared information on the size or origin of the cyberattack. No one appears to have taken credit for the DDoS attack.
Advertisement. Scroll to continue reading.
Canonical was hit by a more disruptive attack in late April. Launchpad and the Snap Store were among the services taken down, and some users could not install Ubuntu updates. The company described that incident as a “sustained, cross-border attack.”
A hacktivist group calling itself The Islamic Cyber Resistance in Iraq – 313 Team claimed responsibility for that attack. It’s unclear whether the two incidents are connected.
Related : NightmareStresser DDoS Service Disrupted in International Operation
Related : 53 DDoS Domains Taken Down by Law Enforcement
Related : After Bluesky, Mastodon Targeted in DDoS Attack
Written By
Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
More from Eduard Kovacs
- Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security
- Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own
- Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
- US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward
- TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws
- Oracle Health Data Breach Tally Climbs to Nearly 20 Million
- Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts
- Advantest Discloses Data Breach Months After Ransomware Attack
Latest News
- IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion
- Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
- Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
- iRhythm Data Breach Impacts at Least 360,000 People
- Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
- Critical SonicWall Vulnerability Exploited Days After Disclosure
- Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
- Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
Trending
Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe
Critical SonicWall Vulnerability Exploited Days After Disclosure
Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison
iRhythm Data Breach Impacts at Least 360,000 People
Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
Security Awareness Training Isn’t Dead, but It Needs a Rethink
Canonical Websites Disrupted in Second DDoS Attack This Year
Bricksforge WordPress Plugin Vulnerability Exploited in the Wild
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
## Webinar: AI Is Accelerating Risk. Can Your IT Operations Keep Up?
October 14, 2026
Learn about Frontier Pace Governance: a practical approach to helping IT operations move at AI speed without sacrificing security, accountability, or operational discipline.
## Virtual Event: Zero Trust & Identity Strategies Summit 2026
October 14, 2026
Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.
People on the Move
Rapid7 has named Rik Ferguson as VP of Security Intelligence.
Cytactic has appointed Tim Brown as CSO.
Scott Simkin has joined Vega as CMO.
Expert Insights
## AI Has Changed Attack Speed, Not Security Fundamentals
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals. (Joshua Goldfarb)
## Four Cyber Threats Harboring Big Plans for the Future
- AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations. (Steve Durbin)
## Begin at the End: How to Enable Agentic Remediation
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk. (Nadir Izrael)
## “We Think the Security Control Is Working” Is No Longer Good Enough
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today. (Sravish Sridhar)
## This Key Will Self-Destruct: An Open Standard for Revocable API Keys
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here’s a proposal to make that the default. (Matt Honea)
- + Flipboard + Reddit [+ Whatsapp](https://web.whatsapp.com/send?text=Canonical Websites Disrupted in Second DDoS Attack This Year https://www.securityweek.com/canonical-websites-disrupted-in-second-ddos-attack-this-year/) [+ Whatsapp](whatsapp://send?text=Canonical Websites Disrupted in Second DDoS Attack This Year https://www.securityweek.com/canonical-websites-disrupted-in-second-ddos-attack-this-year/) + Email
Popular Topics
Security Community
- Virtual Cybersecurity Events
- Webcast Library
- CISO Forum
- AI Risk Summit
- ICS Cybersecurity Conference
- Cybersecurity Newsletters
Stay Intouch
About SecurityWeek
News Tips
Got a confidential news tip? We want to hear from you.
Advertising
Reach a large audience of enterprise cybersecurity professionals
Daily Briefing Newsletter
Subscribe to the SecurityWeek Daily Briefing and get the latest content delivered to your inbox.
Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.