Cloudflare-2026-threat-report.pdf

The Cloudflare Threat Report 2026 summarizes global trends and active threats observed across Cloudflare’s network, highlighting the industrialization of cyber attacks via AI, nation-state pre-positioning in critical infrastructure (Chinese actors named), SaaS-to-SaaS supply-chain compromises (exemplified by GRUB1), token-theft and infostealer operations (LummaC2) that bypass MFA, hyper-volumetric DDoS (Aisuru) capable of 31.4 Tbps, and social/identity threats including deepfake payroll infiltration—recommending defenders shift to identity- and system-level security to address high-velocity, automated adversary operations.