{"schema_version":"onlylabs.public_signal.v1","title":"Cloudflare (Workers AI) Writing: Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","description":"Cloudflare (Workers AI) writing signal with public source context, captured evidence pages, related signals, and category-scoped analysis context.","url":"https://onlylabs.fyi/signals/289a4fb1-dfe1-4f4f-b3d6-4dde8028fdc3","json_url":"https://onlylabs.fyi/signals/289a4fb1-dfe1-4f4f-b3d6-4dde8028fdc3/signal.json","generated_at":"2026-09-10T09:55:53.724Z","evidence_latest_fetched_at":"2026-08-11T16:01:59.45001+00:00","signal_first_seen_at":"2026-08-11T16:00:52.0935+00:00","org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud","category_label":"Neocloud","dossier_url":"https://onlylabs.fyi/labs/cloudflare","dossier_json_url":"https://onlylabs.fyi/labs/cloudflare/dossier.json"},"related_urls":{"signal":"https://onlylabs.fyi/signals/289a4fb1-dfe1-4f4f-b3d6-4dde8028fdc3","signal_json":"https://onlylabs.fyi/signals/289a4fb1-dfe1-4f4f-b3d6-4dde8028fdc3/signal.json","source":"https://blog.cloudflare.com/ddos-threat-report-2026-h1/","lab_dossier":"https://onlylabs.fyi/labs/cloudflare","lab_dossier_json":"https://onlylabs.fyi/labs/cloudflare/dossier.json","analysis":"https://onlylabs.fyi/analysis/cloudflare","analysis_json":"https://onlylabs.fyi/analysis/cloudflare/analysis.json","analysis_evidence_json":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","category":"https://onlylabs.fyi/neoclouds","category_json":"https://onlylabs.fyi/neoclouds.json","category_feed":"https://onlylabs.fyi/neoclouds/feed.xml","category_signals_json":"https://onlylabs.fyi/signals.json?category=neocloud","topic":"https://onlylabs.fyi/topics/talking","topic_signals_json":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","topic_feed":"https://onlylabs.fyi/topics/talking/feed.xml?category=neocloud","data_business":null},"answer_pack":{"answer":"Cloudflare (Workers AI) published Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave. This talking signal gives public context for research themes, product direction, policy, or launch framing. High-signal details: Not AI-related, routine security report. · Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave | Cloudflare Blog Skip to content Welcome to the 25th.... onlylabs links this event to 1 captured evidence page and 6 related writing signals.","signal_desk":"talking","source_context":{"source_url":"https://blog.cloudflare.com/ddos-threat-report-2026-h1/","source_host":"blog.cloudflare.com","occurred_at":"2026-08-11T13:00:00+00:00","first_seen_at":"2026-08-11T16:00:52.0935+00:00","date_source":"rss.item_date","context":null},"context_markers":[{"label":"Lab","value":"Cloudflare (Workers AI)","source":"signal"},{"label":"Signal desk","value":"talking","source":"signal"},{"label":"Source host","value":"blog.cloudflare.com","source":"source"},{"label":"Author","value":"Cloudforce One","source":"source"},{"label":"Notability","value":"Not AI-related, routine security report.","source":"signal"},{"label":"Watch term","value":"Infrastructure","source":"evidence"},{"label":"Watch term","value":"Safety and alignment","source":"evidence"}],"evidence_coverage":{"target_pages":1,"captured_pages":1,"readable_pages":1,"capture_methods":["plain"],"missing_page_urls":[],"failed_page_urls":[],"blocked_page_urls":[],"page_urls":["https://blog.cloudflare.com/ddos-threat-report-2026-h1/"],"related_signals":6,"has_source_url":true,"latest_page_fetched_at":"2026-08-11T16:01:59.45001+00:00"},"data_business":{"matches":false,"lanes":[],"matched_terms":[],"score":null,"reason":null},"agent_handoff":{"signal_json":"https://onlylabs.fyi/signals/289a4fb1-dfe1-4f4f-b3d6-4dde8028fdc3/signal.json","dossier_json":"https://onlylabs.fyi/labs/cloudflare/dossier.json","analysis_json":"https://onlylabs.fyi/analysis/cloudflare/analysis.json","analysis_evidence_json":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","topic_signals_json":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","topic_feed":"https://onlylabs.fyi/topics/talking/feed.xml?category=neocloud","category_signals_json":"https://onlylabs.fyi/signals.json?category=neocloud","data_radar_json":null,"opportunities_json":null},"analysis_playbook":{"objective":"Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.","evidence_focus":["post title","source URL","captured page text","HN traction","linked model or paper references","publication date"],"extraction_questions":["Which themes are labs choosing to explain publicly?","Which posts are attracting outside discussion?","Which writing reframes a recent release, model, hiring wave, or policy stance?","Which posts mention data, evals, infrastructure, safety, or deployment workflows?"],"signal_questions":["What public theme, launch framing, or research direction does this writing signal expose?","Which themes are labs choosing to explain publicly?","Which posts are attracting outside discussion?","Do the 6 related writing signals show a repeated pattern?"],"output_fields":["org","theme","public_framing","traction","evidence_url"],"data_business_relevance":"Data-business lane extraction is scoped to frontier labs; for this category, keep conclusions tied to category-specific strategy, source evidence, and follow-up questions.","required_sources":[{"label":"signal_json","url":"https://onlylabs.fyi/signals/289a4fb1-dfe1-4f4f-b3d6-4dde8028fdc3/signal.json","required":true},{"label":"source","url":"https://blog.cloudflare.com/ddos-threat-report-2026-h1/","required":true},{"label":"dossier_json","url":"https://onlylabs.fyi/labs/cloudflare/dossier.json","required":true},{"label":"analysis_evidence_json","url":"https://onlylabs.fyi/analysis/cloudflare/evidence.json","required":true},{"label":"topic_signals_json","url":"https://onlylabs.fyi/topics/talking/signals.json?category=neocloud","required":false},{"label":"data_radar_json","url":null,"required":false}],"expected_output":["one-paragraph source-grounded interpretation","category-specific implication","confidence and missing evidence","recommended next source to inspect"],"prompt_seed":"Using only the linked onlylabs JSON, captured source context, and cited evidence, analyze Cloudflare (Workers AI)'s writing signal \"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave\" for neocloud strategy."},"semantic_triples":[{"subject":"Cloudflare (Workers AI)","predicate":"published","object":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","text":"Cloudflare (Workers AI) published Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"is classified as","object":"writing signal","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave is classified as writing signal."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"belongs to","object":"talking desk","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave belongs to talking desk."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has evidence coverage","object":"1 captured evidence page","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has evidence coverage 1 captured evidence page."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has captured page count","object":"1","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has captured page count 1."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has readable page count","object":"1","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has readable page count 1."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has related signal count","object":"6","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has related signal count 6."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has analysis playbook objective","object":"Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has analysis playbook objective Turn public writing and discussion into a readable map of research themes, product framing, policy posture, launch narratives, and market attention.."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has source host","object":"blog.cloudflare.com","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has source host blog.cloudflare.com."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has lab","object":"Cloudflare (Workers AI)","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has lab Cloudflare (Workers AI)."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has signal desk","object":"talking","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has signal desk talking."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has source host","object":"blog.cloudflare.com","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has source host blog.cloudflare.com."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has author","object":"Cloudforce One","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has author Cloudforce One."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has notability","object":"Not AI-related, routine security report.","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has notability Not AI-related, routine security report.."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has watch term","object":"Infrastructure","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has watch term Infrastructure."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has watch term","object":"Safety and alignment","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has watch term Safety and alignment."}]},"intelligence":{"signal_desk":"talking","answer":"Cloudflare (Workers AI) published Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave. This talking signal gives public context for research themes, product direction, policy, or launch framing. High-signal details: Not AI-related, routine security report. · Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave | Cloudflare Blog Skip to content Welcome to the 25th.... onlylabs links this event to 1 captured evidence page and 6 related writing signals.","semantic_triples":[{"subject":"Cloudflare (Workers AI)","predicate":"published","object":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","text":"Cloudflare (Workers AI) published Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"is classified as","object":"writing signal","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave is classified as writing signal."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"belongs to","object":"talking desk","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave belongs to talking desk."},{"subject":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","predicate":"has evidence coverage","object":"1 captured evidence page","text":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave has evidence coverage 1 captured evidence page."}]},"signal":{"id":"289a4fb1-dfe1-4f4f-b3d6-4dde8028fdc3","url":"https://onlylabs.fyi/signals/289a4fb1-dfe1-4f4f-b3d6-4dde8028fdc3","json_url":"https://onlylabs.fyi/signals/289a4fb1-dfe1-4f4f-b3d6-4dde8028fdc3/signal.json","source_url":"https://blog.cloudflare.com/ddos-threat-report-2026-h1/","title":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","summary":"Cloudflare (Workers AI) published a writing signal. onlylabs watches public writing for research themes, product direction, and model-launch context.","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-08-11T13:00:00+00:00","first_seen_at":"2026-08-11T16:00:52.0935+00:00","date_source":"rss.item_date","evidence_coverage":{"target_pages":1,"captured_pages":1,"readable_pages":1,"capture_methods":["plain"],"missing_page_urls":[],"failed_page_urls":[],"blocked_page_urls":[],"page_urls":["https://blog.cloudflare.com/ddos-threat-report-2026-h1/"]},"facets":{},"traction":{"github_stars":null,"hn_points":null,"hn_comments":null,"hn_story_id":null,"hf_downloads":null,"hf_likes":null},"data_radar":null},"primary_evidence_page":{"is_primary":true,"source_match":true,"url":"https://blog.cloudflare.com/ddos-threat-report-2026-h1/","final_url":"https://blog.cloudflare.com/ddos-threat-report-2026-h1/","title":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave","http_status":200,"content_type":"text/html","capture_method":"plain","fetched_at":"2026-08-11T16:01:59.45001+00:00","bytes":4226323,"raw_path":"60a1caf06fff93701f9d665474d493cda5c9733dedfd845990b23444eabb7952.html","content_hash":"5966f5c6470d2c246e0e4dbf6d0c6ee97d2df4929ea470da936c2adda1c135d2","excerpt_chars":1200,"truncated":true,"excerpt":"Cloudflare DDoS Threat Report H1 2026: 1 Tbps attacks soar as DNS floods and geopolitical tensions drive a new wave | Cloudflare Blog Skip to content Welcome to the 25th edition of Cloudflare's DDoS Threat Report. This is the first half-year edition in the series: rather than publishing separate reports for the first and second quarters of 2026, we have combined our coverage of Q1 and Q2 into a single volume covering January through June 2026. The analysis is produced by Cloudforce One , Cloudflare’s Threat Intelligence organization, providing a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network . Key insights The 1 Tbps club grew. Cloudflare mitigated a combined 935 network-layer DDoS attacks exceeding 1 Tbps in the first half of 2026 and a +519% quarter-over-quarter surge between Q1 and Q2. The attack-vector center of gravity shifted from botnet floods to reflection and amplification. DNS-based attacks accounted for 34.3% of all network-layer activity in the first half of 2026, with DNS Floods alone climbing from 25.7% to 40.0% of network-layer attacks quarter-over-quarter. CLDAP..."},"evidence_pages":[],"related_signals":[{"id":"eb3e22c0-b6c6-4fbb-8ee7-dd7fc74b9f89","url":"https://onlylabs.fyi/signals/eb3e22c0-b6c6-4fbb-8ee7-dd7fc74b9f89","source_url":"https://blog.cloudflare.com/workers-module-registry-nodejs/","title":"How we rebuilt Cloudflare Workers’ module registry for Node.js compatibility","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-09-09T13:00:00+00:00","first_seen_at":"2026-09-09T16:00:56.831103+00:00","date_source":"rss.item_date"},{"id":"bab3e8a8-2d87-4961-9724-81b6fc35fbc3","url":"https://onlylabs.fyi/signals/bab3e8a8-2d87-4961-9724-81b6fc35fbc3","source_url":"https://blog.cloudflare.com/automatic-key-exchange-for-origins/","title":"Automatic Key Exchange: faster, post-quantum secure origin handshakes for 45 billion daily connections (and counting)","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-09-08T13:10:00+00:00","first_seen_at":"2026-09-08T16:00:52.333901+00:00","date_source":"rss.item_date"},{"id":"0da69396-3b6b-4b6f-adc3-4e202959fcab","url":"https://onlylabs.fyi/signals/0da69396-3b6b-4b6f-adc3-4e202959fcab","source_url":"https://blog.cloudflare.com/vulnerability-discovery-remediation/","title":"Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak models","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-09-03T21:03:02+00:00","first_seen_at":"2026-09-04T00:03:22.195955+00:00","date_source":"rss.item_date"},{"id":"2dd7bf6b-ffcb-4ea5-8053-ba918cf3815c","url":"https://onlylabs.fyi/signals/2dd7bf6b-ffcb-4ea5-8053-ba918cf3815c","source_url":"https://blog.cloudflare.com/cache-transcoding/","title":"How we could save petabytes of cache storage with Zstandard and Pingora","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-09-01T12:59:00+00:00","first_seen_at":"2026-09-01T16:00:52.149187+00:00","date_source":"rss.item_date"},{"id":"e59e3999-718c-4411-a63b-134fb020f71a","url":"https://onlylabs.fyi/signals/e59e3999-718c-4411-a63b-134fb020f71a","source_url":"https://blog.cloudflare.com/introducing-adaptive-intelligence/","title":"Introducing Adaptive Intelligence: Undermining the economics of every bot attack","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-08-31T12:59:00+00:00","first_seen_at":"2026-08-31T16:01:47.780425+00:00","date_source":"rss.item_date"},{"id":"fa151649-b492-470a-9d3b-b7f0eda5c2e1","url":"https://onlylabs.fyi/signals/fa151649-b492-470a-9d3b-b7f0eda5c2e1","source_url":"https://blog.cloudflare.com/botbase-for-operators/","title":"BotBase for Operators: A clearer path to joining Cloudflare's directory of bots and agents","context":null,"kind":{"key":"post_published","label":"Writing"},"org":{"slug":"cloudflare","name":"Cloudflare (Workers AI)","category":"neocloud"},"occurred_at":"2026-08-28T12:59:44+00:00","first_seen_at":"2026-08-28T16:00:52.171283+00:00","date_source":"rss.item_date"}]}