Loading story…
Cloudflare reported that major internet disruptions across April through June 2026 were driven by a mix of government-ordered shutdowns, technical failures, and physical infrastructure damage. Iran restored connectivity on May 26 after an 88-day nationwide shutdown, while Iraq and Sudan imposed temporary exam-related blackouts intended to prevent cheating. The company said these incidents showed how state actions continued to play a major role in suppressing national and regional internet access.
Cloudflare also documented outages tied to operational and environmental causes. Drone-strike damage in the United Arab Emirates and Bahrain continued to reduce traffic to an AWS cloud region in the UAE, and a DENIC DNSSEC key rollover error temporarily made .de domains unreachable even though the underlying network remained online. Other disruptions included a fiber cut affecting Karib Cable in Saint Lucia, storm-related outages in Guam, earthquake-driven traffic drops across Venezuelan ISPs, and a power outage in Tanzania.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
Cloudflare reported that internet access in Iran was restored on 2026-05-26, ending an 88-day nationwide shutdown. The restoration was identified as one of the major internet disruption developments observed in Q2 2026.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cloudflare said it mitigated **23.2 million network-layer DDoS attacks** and **29.64 trillion** malicious HTTP requests in the first half of 2026, with April marking the peak of activity. The sharpest growth came from hyper-volumetric attacks: **935 network-layer attacks exceeded 1 Tbps** in H1, including **805 in Q2**, up from about 130 in Q1. The company said attackers increasingly shifted from traditional botnet floods to **reflection and amplification** methods, with **DNS-based attacks** becoming the leading network-layer vector and **CLDAP floods** rising 580 percent quarter over quarter to become the third most common vector in Q2. Cloudflare linked the wave to geopolitical flashpoints and major events, saying **media, production, and publishing** became the most targeted sector as attackers sought to disrupt reporting and suppress information around the wars involving Ukraine and Iran and the FIFA World Cup. Government entities also saw increased targeting following the US-Israeli operation against Iran, while the US, China, and Turkey ranked among the most-targeted regions, including elevated attacks around the Ankara NATO Summit. Cloudflare said DDoS activity declined after April and suggested the drop may be tied to **Operation PowerOFF**, a multinational law-enforcement crackdown on DDoS-for-hire services.
Aug 18, 2026
A series of high-profile cloud outages disrupted access to critical services across multiple sectors, affecting organizations such as Starbucks, crypto exchanges, and messaging platforms like Signal. The Amazon Web Services (AWS) outage, triggered by a software bug in DynamoDB, led to a 15-hour disruption in Northern Virginia data centers, while a subsequent Microsoft Azure outage was caused by a configuration error in Azure Front Door. These incidents exposed the fragility of digital infrastructure and raised concerns about the concentration of power among a few dominant cloud providers, prompting advocacy groups to call for increased regulatory scrutiny. The outages also underscored the essential role of DNS in business continuity, as failures in DNS resolution prevented customers and internal services from accessing critical database resources. Experts emphasized that DNS, as the foundational protocol for translating domain names to IP addresses, can create widespread disruptions when it fails, regardless of the underlying cause. The events reignited discussions about the need for greater resilience in both cloud and DNS infrastructure to mitigate the impact of future outages on businesses and the broader digital ecosystem.
Jul 3, 2026
A major outage at Cloudflare led to widespread internet disruptions, impacting numerous high-profile services including X (formerly Twitter), ChatGPT, Spotify, League of Legends, and Downdetector. Users around the world reported being unable to access these platforms, with outage tracking sites themselves also affected due to their reliance on Cloudflare's infrastructure. Cloudflare confirmed the issue as a global network problem and stated that they were actively investigating and working to restore services, though no immediate resolution timeline was provided. The outage was notable for its global reach and the number of critical internet services affected, highlighting the central role Cloudflare plays in web infrastructure. The incident drew comparisons to previous large-scale outages involving Cloudflare and other cloud service providers, raising concerns about the resilience of the internet's backbone services. As of the latest updates, Cloudflare teams continued efforts to remediate the issue and restore normal operations for all impacted customers.
Jun 29, 2026