The Telegraph Hit by Security Incident Triggering Access Restrictions The Telegraph recently experienced a security incident that prompted temporary access restrictions for some users. The disruption, detected by the publisher’s security systems, flagged "unusual activity" on certain connections, leading to a blockage of content delivery. Affected users encountered an error page citing an "Akamai Reference Number" (e.g., ak_ref_id: 0.decc017.1777389857.b4172bf) and were directed to troubleshoot by disabling VPNs, switching browsers, or accessing the site from alternative devices. The message also referenced TollBit, a content access platform, indicating potential authentication or paywall-related complications. While the exact cause of the incident remains unclear, the response suggests a defensive measure to mitigate suspicious traffic or unauthorized access attempts. The Telegraph’s customer support page was provided as a contact point for unresolved issues. No further details on the scope or duration of the disruption have been disclosed.

Global Crackdown on DDoS-for-Hire Services Yields Arrests and Domain Seizures Law enforcement agencies from 21 countries conducted a coordinated strike against illegal DDoS-for-hire services on 13 April 2026 as part of Operation PowerOFF, a long-running effort to disrupt cybercriminal platforms. The operation targeted so-called "booters" or "stressers" websites that allow users with minimal technical knowledge to launch DDoS attacks for as little as a few dollars. During the latest action, authorities arrested four individuals and seized 53 web domains linked to these services. Europol, which played a central role in the investigation, revealed that seized databases contained details of over 3 million criminal user accounts. To deter future misuse, law enforcement sent 75,000 warning letters and emails to users, including hobbyists and young offenders, emphasizing the legal consequences of their actions. The operation also employed preventive measures, such as redirecting Google search ads for DDoS-for-hire services to law enforcement warnings and tracking cryptocurrency payments to issue additional alerts. DDoS-for-hire platforms have become a low-barrier entry point for cybercrime, enabling attacks that disrupt businesses, government services, and individuals by overwhelming targets with malicious traffic. Operation PowerOFF has been active for years, with notable past successes, including the 2018 shutdown of Webstresser.org (which had 136,000 users and launched 4 million attacks) and the 2022 seizure of IPStresser.com. In 2023, the U.S. Department of Justice took down over a dozen DDoS-for-hire domains, while 2024 saw 15 countries dismantle 27 more sites, including zdstresser.net and orbitalstress.net, alongside three arrests in France and Germany. May 2025 brought the arrest of four individuals in Poland for operating platforms like Cfxapi, where attacks cost as little as €10. Most recently, in March 2026, authorities disrupted four major botnets Aisuru, KimWolf, JackSkid, and Mossad used to amplify DDoS attacks. While the seizures and arrests have not eradicated DDoS-for-hire services, they have significantly raised the operational costs and risks for cybercriminals, making it harder to sustain large-scale disruptions.

Global Law Enforcement Disrupts Four Major IoT Botnets Behind Record-Breaking DDoS Attacks Authorities from the United States, Germany, and Canada have dismantled the Command and Control (C2) infrastructure of four prolific botnets Aisuru, KimWolf, JackSkid, and Mossad responsible for infecting millions of Internet of Things (IoT) devices and launching devastating Distributed Denial of Service (DDoS) attacks worldwide. The operation targeted virtual servers, domains, and other infrastructure used by the botnets to orchestrate attacks, including strikes against U.S. Department of Defense (DoD) networks. In December 2023, the Aisuru botnet set a new DDoS record with an attack peaking at 31.4 Tbps and 200 million requests per second, primarily targeting telecommunications companies. Aisuru had previously broken records with a 29.7 Tbps attack, while a November incident linked to 500,000 compromised IP addresses reached 15.72 Tbps. According to the U.S. Justice Department, the botnets collectively issued over 316,000 DDoS attack commands: - Aisuru: 200,000+ commands - KimWolf: 25,000+ commands - JackSkid: 90,000+ commands - Mossad: 1,000+ commands The botnets ensnared over three million IoT devices, including webcams, DVRs, and WiFi routers, many located in the U.S. Operators monetized the networks through a cybercrime-as-a-service model, selling access to criminals who launched attacks resulting in tens of thousands of dollars in losses and remediation costs. Some attacks involved extortion demands, while others aimed to cripple internet infrastructure, degrade ISP services, and overwhelm cloud-based mitigation platforms, as noted by Akamai, a private-sector partner in the operation. The takedown aims to disrupt botnet communications, prevent further infections, and neutralize future attack capabilities.

Akamai detected and mitigated the largest DDoS attack, which has been launched against a publicly unknown Akamai European customer. Targeting Akamai European clients, the attack lasted for more than 14 hours and traffic peaked at 853.7 Gbps and 659.6 Mpps. The most major DDoS assault method was UDP flood, which involved sending a target a huge quantity of UDP packets in an effort to overwhelm its processing and response capabilities. Define the procedure and a dedicated team to respond to the attack, identify the assets that should be safeguarded, determine the business effect, and select the appropriate DDoS solution.