Cloudflare report shows surge in massive 1 Tbps DDoS attacks

Cloudflare’s H1 2026 DDoS Threat Report reveals a significant rise in massive-scale cyberattacks. The number of network-layer DDoS attacks exceeding 1 Tbps reached 935 in the first half of the year, representing a 519% surge between the first and second quarters.

Attack vectors are shifting from traditional botnet floods toward reflection and amplification methods. DNS-based attacks accounted for 34.3% of all network-layer activity, with DNS Floods specifically increasing from 25.7% to 40.0% quarter-over-quarter. Additionally, CLDAP Floods saw a 580% increase in the second quarter.

Geopolitical tensions have heavily influenced the threat landscape. The media, production, and publishing industries were the most targeted sectors, driven by global interest in conflicts in Iran and Ukraine. The government sector also saw a major rise in targeting, moving from the 29th to the 9th most-attacked sector. While the US remains a major target, Turkey rose to become the third most-attacked country during the period.