Cyber News SecurityWeek 4 days ago

Canonical Websites Disrupted in Second DDoS Attack This Year

CN
CyberNew Threat Research Desk
• Original Reporting: SecurityWeek
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Cyber News

Analyst Takeaway

"Canonical’s websites were disrupted last week by a distributed denial-of-service (DDoS) attack, months after a larger attack hit the Ubuntu maker’s infrastructure. The company confirmed the attack on October 8 in a post on the Ubuntu Discourse forum. “Canonical’s websites are under a sustained distributed denial of service attack,” the company said, adding that some services might not be..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Ubuntu

Canonical’s websites were disrupted last week by a distributed denial-of-service (DDoS) attack, months after a larger attack hit the Ubuntu maker’s infrastructure.

The company confirmed the attack on October 8 in a post on the Ubuntu Discourse forum. “Canonical’s websites are under a sustained distributed denial of service attack,” the company said, adding that some services might not be reachable at times.

The disruption was limited to Canonical’s primary web properties, OMG! Ubuntu reported. These included ubuntu.com, canonical.com, the Ubuntu blog and developer site, and Ubuntu’s security advisory pages and API.

Developer-facing services such as Launchpad and the Snap Store did not appear to be affected.

Canonical said on October 9 that its team was still bringing affected services back, though most were accessible again. OMG! Ubuntu put the total downtime at a little over four hours. 

The company has not publicly shared information on the size or origin of the cyberattack. No one appears to have taken credit for the DDoS attack.

Advertisement. Scroll to continue reading.

Written By Eduard Kovacs

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from SecurityWeek.

Primary Advisory →