DDoS and Ransomware Attacks Surge in First Half of 2026

In the first half of 2026, South Korea's KISA reported 1,236 cyber incidents, marking a 19.5% increase from the previous year. DDoS attacks rose to 373 incidents, a 56.7% increase, while ransomware incidents surged to 145, up 76.8%. The report identified five key threats, including the misuse of generative AI, supply chain attacks targeting open-source ecosystems, and the rise of international hacktivist DDoS attacks. Notably, ransomware is evolving to include double extortion tactics, where attackers steal data before encrypting systems. The Ministry of Science and ICT and KISA urged companies to enhance their cybersecurity measures, including implementing multi-factor authentication and immutable backups. The overall trend indicates a growing sophistication in cyber threats, particularly with the involvement of AI in attack methods.

Key Points: • Cyber incidents in South Korea increased by 19.5% in the first half of 2026. • DDoS attacks surged by 56.7% and ransomware incidents rose by 76.8% compared to last year. • Five key threats identified include AI misuse and supply chain attacks targeting open-source software.