Netscout doubled its distributed denial-of-service (DDoS) resiliency in wake of recent large-scale botnet breaches.

In a bid to bolster its cloud-based defenses, Arbor Cloud DDoS attack mitigation capacity now stands at 33 Tb/s (33T). Netscout touted a greater ability to absorb and block larger volumetric and more sophisticated breaches, along with faster stabilization to keep attacks from reaching customer infrastructure. The vendor claimed this “shield wall” can hold in place after an attack subsides.

Under the hood, Netscout’s Arbor Cloud defender combines on-premises defense with cloud scrubbing via automated cloud signaling. This hybrid architecture can mitigate threats locally near their source while automatically redirecting massive volumetric DDoS attacks to the cloud.

Netscout pointed to the increasing threat posted by heavyweight botnets like Aisuru, which with fellow botnet Kimwolf was responsible for an attack last year that reached 31.4 Tb/s and 200 million requests per second in scope. Netscout joins the likes of Nokia and Megaport in DDoS mitigation for the enterprise.

One growing attack surface is ultra domain name system (UltraDNS), cloud-hosted DNS services designed to securely guide user query responses for enterprises. According to research from DigiCert, UltraDNS attacks soared in late 2025, with breaches increasing in both size and length.

“With the increased use of AI, threat actors are targeting organizations whose defenses are vulnerable to the new, more complex DDoS attacks designed to take down critical infrastructure,” Carlos Morales, Netscout’s SVP and GM for Arbor Cloud, explained. “As enterprises increasingly rely on AI-powered applications and cloud-native services, while at the same time attack size and complexity continue to rise, implementing automated and proactive defenses for uninterrupted availability has become a business risk imperative.”