Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave

This post details the significant increase in hyper-volumetric DDoS attacks (exceeding 1 Tbps) in H1 2026, with a +519% surge quarter-over-quarter. It highlights a shift in attack vectors from botnet floods to reflection and amplification, with DNS-based attacks (DNS Floods and DNS Amplification) accounting for 34.3% of network-layer attacks and CLDAP floods surging +580% to become the #3 vector. Geopolitical events are noted as influencing attack targets, with the Media, Production & Publishing industry being the most attacked, and the Government sector seeing a significant rank jump. The report also discusses the short-lived nature of most attacks, emphasizing the need for automated, always-on protection, and mentions Cloudflare's free DDoS Botnet Threat Feed for Service Providers.