DDoS Attacks Surge 70% in Size, Targeting Enterprises Directly

  • Zayo's 2026 Cybersecurity Insights Report reveals a 70% increase in average DDoS attack size in 2025.
  • Telecoms now account for just 24% of DDoS attacks, down from 42% in 2024, as enterprises become primary targets.
  • Average attack duration decreased to 20 minutes, with 89% of attacks concluding in under 10 minutes.
  • Education sector saw a 24% share of total DDoS attacks, up from 15% the prior year.
  • Manufacturing experienced the largest average attack size at 11.6 Gbps.

The escalation in DDoS attacks reflects a broader trend of cyber threats evolving alongside technological advancements like AI and IoT. As enterprises become primary targets, the need for real-time automated defenses and resilient network architectures is more critical than ever. The strategic disruption of public-facing digital infrastructure, particularly in sectors like government and education, underscores the growing importance of cybersecurity as a foundational business capability.

Target Shift Dynamics
How the shift from telecoms to enterprises will impact cybersecurity strategies and resource allocation.
Attack Velocity
The pace at which DDoS attacks are becoming shorter and more intense, challenging traditional defense mechanisms.
Sector-Specific Risks
Whether industries like education and manufacturing can adapt quickly enough to mitigate operational disruptions.