Cloudflare’s Project Galileo Report Highlights Surge in Attacks on Civil Society, Including Australian Targets Cloudflare’s Project Galileo launched in 2014 to protect journalists, activists, and minority groups from cyber threats has revealed a sharp rise in attacks against civil society organizations, with Australian entities increasingly in the crosshairs. The latest report, covering February 1, 2025, to January 31, 2026, found that groups worldwide faced relentless targeting, with distributed denial-of-service (DDoS) attacks accounting for over 80% of incidents. Globally, Cloudflare blocked 38.5 billion malicious requests against protected organizations, with 18% (6.9 billion) originating in the Asia-Pacific region an average of 18.9 million attacks per day. Despite representing only 12% of Project Galileo’s global beneficiaries, APAC organizations, including Australian groups like Humanitix and Activist Rights, faced disproportionate targeting, making up 4% of protected entities. The report underscores that civil society groups endure seven times more website vulnerability exploit attempts than other Cloudflare customers. While most DDoS attacks on general users last minutes, those against civil society often persist for days or weeks, aligning with prior findings that nonprofits, religious institutions, and civic groups are among the most targeted. Beyond DDoS, attackers employed multilayered tactics, such as using high-volume attacks to conceal vulnerability scans exemplified by a campaign against a global environmental organization during a climate conference in Brazil. Journalists bore a particularly heavy burden, suffering 40.5% of website vulnerability attacks despite comprising just 22.7% of protected users. The findings highlight an escalating threat landscape where malicious actors, including hostile governments, intensify efforts to disrupt vulnerable groups through both brute-force and stealthy cyber operations.