Cloudflare H1 DDoS report: prepare for DNS floods and short, high-volume attacks
Cloudflare's first-half report records 935 network-layer DDoS attacks exceeding 1 Tbps, with DNS attacks also making up a significant share. The data comes from the company's network, not every incident worldwide.
Source Facts
Cloudflare published its January–June 2026 report on 11 August. Its network mitigated 935 network-layer attacks exceeding 1 Tbps. DNS floods and amplification attacks together accounted for 34.3% of network-layer activity.
The report also says most attacks are short: over 90% of network-layer attacks ended within ten minutes. Even short attacks can disrupt services if bandwidth or equipment capacity is insufficient.
Service availability planning should cover networks, DNS and the application layer, with clear responsibilities for handling anomalous traffic established in advance.
Original sources
Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave
Sources checked: 2026-10-26 · Prepared with SI agent assistance; articles have not been individually reviewed by a person.
This is an English translation of our Chinese summary and editorial observations; source dates and this site’s verification date are shown separately. If an original advisory changes, refer to the source.
KEEP READING
Recommended reading
IllustrationAmazon Linux updates its Docker security advisory: check container hosts and archive handling
IllustrationPHP patches and configuration follow-up: Unit 42 corrects its assessment of one intrusion's cause
Illustration