935 times in six months, someone pulled a one-terabit-per-second trigger. A year ago an attack of that class came with a press release. Now it is a Tuesday.
Fact
The facts: per Cloudflare data for the first half of 2026, the company absorbed 23.2 million network DDoS attacks, roughly 5,300 per hour. Mega-attacks above 1 Tbps number 935 - a 519% jump between the first and second quarter. DNS floods grew from 25.7% to 40% of network attacks. Media is the most attacked sector, and government jumped from 29th to 9th place. The report is dated August 11. There is no CVE: this is an attack report, not a software flaw.
The numbers come from the shield itself, so read them as its point of view: Cloudflare counts what passes through its own network. The trend does not depend on the counting, though. The giant attack got cheap because the armies of hijacked devices - the botnets - keep growing while their rent keeps falling.
The DNS flood deserves its own minute. It does not hit your site, it hits the phone book people use to find you. A site with a healthy server and a drowned DNS is exactly as invisible as a site that is down. Ask your provider what stands in front of the DNS, not just in front of the site.
One terabit per second is no longer a hammer for a special door. The hammer is now mass-produced.
The background changed. Plan for this one, not for last year's.
Official primary sources
Cloudflare DDoS Threat Report H1 2026The visual is generated code-art, no third-party images.