Akamai Highlights 104% DDoS Surge and 113% Increase in API Attacks
Akamai's 2026 SOTI report reveals Layer 7 DDoS attacks surged 104% over two years and daily API attacks rose 113%, with 87% of firms hit by API-related incidents in 2025. Unified API abuse, web application attacks and Layer 7 DDoS campaigns highlight rising need for integrated application and API security.
1. Rising Threat Landscape
The 2026 State of the Internet report documents a 104% increase in Layer 7 DDoS attacks over the past two years, a 113% year-over-year rise in daily API attacks and finds 87% of organizations experienced API-related security incidents in 2025.
2. Attack Campaign Evolution
Cybercriminals have industrialized their methods, orchestrating coordinated campaigns that blend API abuse, web application exploits and Layer 7 DDoS activity into scalable, cost-efficient operations aimed at disrupting availability and driving up infrastructure costs.
3. Implications for Enterprise Security
The convergence of application and API vulnerabilities reveals critical visibility gaps when managed separately, underscoring the necessity for unified security strategies to safeguard AI-driven transformation.
4. Akamai's Strategic Response
Akamai recommends integrating application and API security across full-stack cloud infrastructures and leverages its threat intelligence to offer practical mitigation strategies detailed in the report, positioning itself to meet growing demand.