InfoSecBulletin Cybersecurity for mankind
Cloudflare announced today that it has successfully defended against the largest recorded DDoS attack, which peaked at 22.2 terabits per second and 10.6 billion packets per second, surpassing the previous record of 11.5 Tbps. This event shows the growing intensity of cyber threats.
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
“PentesterFlow” AI Automation Tool for Penetration Testers and Bug Hunters
Jailbreak works against AI Models GPT-5.6, Claude Opus 5, and Fable, Claims Researcher
Record‐Breaking Speed and Scale:
This record DDoS attack lasted just 40 seconds, much shorter than typical prolonged campaigns. During this time, attackers generated a massive traffic surge—over double the previous record—reaching 11.5 Tbps for 35 seconds.
By compressing massive volumes of traffic into a very short timeframe, threat actors aim to overwhelm defenses before they can mount an effective response. These “hit-and-run” tactics demand automated, machine-driven detection and mitigation systems that can work in real time at machine speed.
The attack used various strategies, mixing different packet types and amplification techniques for greater effect. These large-scale attacks are fueled by extensive botnets of hacked computers and IoT devices.
Bot herders take advantage of weak security in home routers, cameras, and devices to create networks of attack drones. They launch coordinated UDP floods, SYN floods, and reflection attacks, generating massive amounts of harmful traffic that can overwhelm even secure networks.
Cloudflare’s global network automatically detected and blocked the attack using its edge architecture and machine-learning analytics, without human help. It cleaned traffic near its source, stopping malicious packets from reaching the targeted servers.
This method is very different from older DDoS scrubbing centers that use manual traffic redirection and analysis, which can’t respond quickly or manage high traffic. Cloudflare’s automated system maintained the performance and availability of online services during the brief but severe attack.
Cybercriminals are improving their methods and expanding their botnets, which means hyper-volumetric DDoS attacks will likely become more frequent and severe.
Organizations need to assess if their security providers have the necessary network capacity and automated technology to handle attacks of this magnitude.
