Your APIs are under siege, and attackers are just getting warmed up

Akamai's State of the Internet Security excerpt reports sustained and growing malicious activity through 2025 across APIs, web applications, and multi-layer DDoS channels: average API attacks per enterprise rose notably (258/day in 2025), behavior-based API threats and misconfigurations (authorization/authentication issues) are common, and botnet variants (e.g., Aisuru, Kimwolf) are supporting large-scale DDoS campaigns that increase risk of sensitive-data exposure and operational impact—particularly in regions such as APAC.