NETSCOUT, a provider of cybersecurity and observability solutions, announced an expansion of its Adaptive DDoS Protection (ADP) platform. The update enables service providers to automatically identify and suppress distributed denial-of-service (DDoS) attack traffic that originates from within their own networks. By shifting protection toward the source of the traffic, the company aims to prevent compromised subscriber devices from disrupting network operations or targeting external organizations.
The new capability addresses the growing threat posed by Turbo-Mirai class botnets. These networks of hijacked devices, including consumer broadband routers and Internet of Things (IoT) equipment, are capable of generating multi-terabit attacks. According to NETSCOUT, such outbound attacks have already resulted in service outages, reputational harm, and increased transit costs for providers globally.
The company stated that mitigating this traffic before it exits the network helps reduce infrastructure expenses, lower subscriber churn, and decrease regulatory risk.
Patrick Donegan, founder and principal analyst at HardenStance, commented on the trend of high-speed broadband connectivity combined with vulnerable IoT devices being exploited by large-scale botnets. He described source-side mitigation, also referred to as attack suppression, as a critical component of the defense strategy. Donegan noted that NETSCOUT’s approach is backed by the need to address these emerging threats effectively.
The announcement was made on August 18, 2026. NETSCOUT, listed on the NASDAQ under the ticker NTCT, positions this extension as a method to help operators protect their own services while reducing the broader internet-wide risk associated with weaponized devices. The solution is designed to assist providers in managing the business costs associated with network disruption and the operational risks of compromised device populations.
