GoKawiil
Tech News
Cloudflare offers a feature called Quick Tunnels that lets developers publicly expose a locally running web server or API with a single command, using the cloudflared command-line tool. No account login is required, and the tool automatically handles TLS certificates, traffic routing, and DDoS protection for the exposed endpoint.
The FBI seized the two domains operating NightmareStresser, a DDoS-for-hire platform that had over 566,000 registered users and dozens of servers capable of launching attacks up to 200 Gbps. The takedown was carried out under Operation PowerOFF, an international law enforcement effort targeting DDoS-as-a-service infrastructure.
In May 2003, UW-Madison discovered its public NTP time server was being hit by a massive, sustained flood of hundreds of thousands of packets per second from hundreds of thousands of hosts worldwide. Investigation revealed this wasn't a DDoS attack but a design flaw in a popular vendor's cheap consumer routers, which mistakenly hardcoded UW-Madison's server as a time source and queried it far too aggressively.
Read the Docs disclosed that in mid-to-late June 2026 it suffered its largest-ever DDoS attack, with traffic peaking at roughly 5.5 million requests per minute—about 100 times normal levels—and lasting nearly ten days. The attack used millions of distributed IP addresses across many networks, including residential and hosting providers, and randomized HTTP headers and TLS fingerprints to evade detection while specifically targeting endpoints that bypass caching.
A large DDoS attack that began early Monday knocked out parts of Norway's shared government digital infrastructure, run by Digdir and operator Vivicta. Services like ID-porten and eSignering were briefly unreachable and remain partially degraded, with users facing connection failures and slow logins. Digdir says no breach or data compromise occurred, and this marks the third such attack on the agency since June.