Corero Network Security has used its latest threat intelligence report to make a straightforward point to the market: DDoS attacks are changing in ways that make slower and more manual defence models less useful.
The company’s core message is that the threat environment is no longer defined only by occasional very large attacks. Corero argues that the more important shift is structural. Attacks are becoming smaller, faster and more complex at the same time. Many now sit below traditional detection thresholds, some finish within seconds, and others combine dozens of vectors in a single campaign. That puts pressure on customers still relying on older architectures built around delayed detection, manual escalation or traffic rerouting after an incident is already under way.
Corero’s report shows that over half of sub-1 Gbps attacks are below 200 Mbps. That is important because attacks at that size can look like ordinary traffic noise rather than a clear security event. For organisations with limited headroom, however, even relatively small attacks can still affect service quality or expose weaknesses ahead of a larger campaign.
Corero Network Security plc (LON:CNS) is a global provider of automated business continuity and network security solutions.







































