Cloudflare data shows media, production and publishing was the most heavily targeted sector for distributed denial-of-service (DDoS) attacks in 2026 so far, driven by the wars in Ukraine and Iran and hacktivist activity linked to the FIFA World Cup. Unlike attacks on e-commerce sites, which typically aim to steal transaction revenue, assaults on publishers are usually intended to censor, suppress information or disrupt coverage at critical moments, since taking a newsroom offline even briefly during a breaking story can silence it when readership peaks.

Media and publishing accounted for 14.2% of all DDoS attacks recorded since January, roughly four times the volume aimed at the next most-targeted sector, gambling and casinos, over the first half of the year, rising to six times in the second quarter. The US war with Iran also drove a surge in attacks on government targets, which jumped from the 29th to the ninth most-targeted sector between Q1 and Q2, while Turkey became the third most-targeted region after hosting the Ankara NATO summit in July. Separately, Cloudflare mitigated 805 network-layer attacks exceeding 1 Tbps in Q2 alone, a 519% increase on the previous quarter, reflecting a broader rise in hyper-volumetric attacks capable of overwhelming even robust internet infrastructure.