CLOUDFLARE DDOS THREAT REPORT H1 2026: 1 TBPS ATTACKS SOAR AS DNS FLOODS AND GEOPOLITICAL TENSIONS DRIVE A NEW WAVE

Summary from the TLDR InfoSec newsletter

Cloudflare's H1 2026 DDoS Threat Report highlights a massive escalation in attack volume, recording 935 incidents exceeding 1 Tbps driven by a shift toward DNS-based floods and a 580 percent quarterly surge in CLDAP reflection. Real-world geopolitical events heavily dictated targeting patterns, with Operation Epic Fury triggering a massive spike in attacks against government infrastructure and the Ankara NATO Summit pushing Turkey into the top three most-attacked countries. Furthermore, Brazil has officially overtaken the United States as the primary source of global attack traffic, while the media sector remains the most targeted industry globally.