[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

3 clusters · 10 sources · 22 days · First seen · Last updated

Cloudflare DDoS attack trends 2026

Overview

Cloudflare reports a significant increase in Distributed Denial of Service (DDoS) attacks during the first half of 2026. The company repelled 23.2 million attacks against its network infrastructure, averaging approximately 128,000 attacks per day, while also blocking 29.64 trillion malicious requests directed at specific websites.

A notable trend is the surge in hyper-volumetric attacks exceeding 1 Tbps, which saw a 519% increase between the first and second quarters. Medium-sized attacks are also rising, with bandwidth attacks between 500 Gbps and 1 Tbps increasing by 143%, and those between 100 Gbps and 500 Gbps increasing by 105%. Data from Link11 corroborates this shift toward intensity, noting record-breaking bandwidth attacks reaching 2.3 Tbit/s.

Attack vectors are shifting from traditional botnet floods toward reflection and amplification methods. DNS-based attacks accounted for 34.3% of all network-layer activity, with DNS Floods specifically increasing from 25.7% to 40.0% quarter-over-quarter. CLDAP Floods experienced a 580% increase in the second quarter. The escalation is attributed to hijacked cloud servers and superbotnets such as Aisuru and Kimwolf.

Geopolitical tensions have influenced these trends, with the media, production, and publishing sectors being heavily targeted. The government sector saw a major rise in targeting, moving from the 29th to the 9th most-attacked sector. While the US remains a major target, Brazil has overtaken the US as the primary country of origin for these attacks, and Turkey has emerged as the third most-attacked country.

Entities

Cloudflare · Eurojust · Cloudforce One · Europol · Link11

Timeline

  1. 10 days ago

    [TECHNOLOGY] 2 sources
    DDoS attacks shift toward hypervolumetric intensity in H1 2026

    Cybersecurity reports for H1 2026 show a shift toward hypervolumetric DDoS attacks, with record-breaking bandwidth reaching 2.3 Tbit/s despite a decrease in the total number of individual incidents.

  2. 27 days ago

    [TECHNOLOGY] 2 sources
    Cloudflare reports 23 million DDoS attacks in six months

    Cloudflare reported 23.2 million DDoS attacks in the first half of 2026, including a 519% surge in hyper-volumetric attacks exceeding 1 Tbps.

  3. about 1 month ago

    [TECHNOLOGY] 6 sources
    Cloudflare report shows surge in massive 1 Tbps DDoS attacks

    Cloudflare reports a 519% surge in 1 Tbps-scale DDoS attacks during H1 2026, driven by DNS floods and geopolitical tensions affecting media and government sectors.

Sources

all-about-security.de · b2b-cyber-security.de · blog.cloudflare.com · invitehealth.substack.com · itdaily.be · itiko.de · pplware.sapo.pt · sapo.pt · uk.pcmag.com · upday.com

This summary has been updated 1 time: see revision history