Application and API attacks on the rise in EMEA

Akamai recorded a 21% increase in web attacks between Q1 2023 and Q1 2024.

  • Wednesday, 31st July 2024 Posted 3 months ago in by Phil Alsop

Akamai Technologies has released a new State of the Internet report that shows monthly web application and API attack activity remained elevated during the first six months of 2024 in Europe, the Middle East and Africa (EMEA). ‘Digital Fortresses Under Siege: Threats to Modern Application Architectures’ shows that a monthly average of 40% of those web attacks target APIs. This is not surprising given the high adoption of APIs in EMEA, which is driven in part by regulation.

The number of Layer 3 and 4 DDoS attacks also grew steadily in EMEA, surpassing the number of attacks in North America in five of the past seven months. The financial services sector bore the brunt of these attacks with 1,523 attack events, followed by manufacturing at 890. Russian

hacktivist groups declared their intention to launch DDoS attacks on the European banking system, and we surmise that the main reason for the rise in DDoS attack events in the financial services industry is this geopolitical hacktivism.

‘Digital Fortresses Under Siege: Threats to Modern Application Architectures’ also finds:

The top three countries most impacted by web application and API attacks were the United Kingdom (20.5 billion), the Netherlands (15.6 billion), and Spain (12.7 billion).

Commerce was the most impacted industry for web attacks in EMEA driven by a high percentage of API attacks, and was also the most impacted industry for Layer 7 DDoS attacks

Layer 7 DDoS attacks on APIs remained fairly steady and accounted for 25% of those attacks.

Within EMEA, the areas with the highest number of Layer 7 DDoS attacks were Germany (461 billion) and the United Kingdom (366 billion), followed by Sweden (167 billion)

Richard Meeus, Director of Security Technology and Strategy, EMEA at Akamai, said: ‘Europe is beset by a barrage of API attacks. Applications are great enablers of communication but they can also be the Achilles’ heel of an organization if not shielded effectively. The increase of web application and API attacks in EMEA underscores the importance of protecting networks effectively to ensure no bad actors can leverage this increased attack surface. This is no longer just a revenue and reputation risk but also a matter of compliance with key EU directives such as NIS2 and DORA. ’

The promise of AI is on every biopharma’s radar, but the reality today is that much of the industry is grappling with how to convert the hype into...
IT teams urged to resolve ‘data delays’ as UK executives struggle to access and use relevant business data.

‘Playtime is over’ for GenAI

Posted 5 days ago by Phil Alsop
NTT DATA research shows organizations shifting from experiments to investments that drive performance.

GenAI not production-ready?

Posted 5 days ago by Phil Alsop
Architectural challenges are holding UK organisations back - with just 24% citing having sufficient governance to implement GenAI.

AI tops decision-makers' priorities

Posted 5 days ago by Phil Alsop
Skillsoft has released its 2024 IT Skills and Salary Report. Based on insights from more than 5,100 global IT decision-makers and professionals, the...

The state of cloud ransomware in 2024

Posted 5 days ago by Phil Alsop
Ransom attacks in the cloud are a perennially popular topic of discussion in the cloud security realm.
Talent and training partner, mthree, which supports major global tech, banking, and business clients to build job-ready teams, has revealed the...

AI innovation is powering the Net Zero transition

Posted 5 days ago by Phil Alsop
Whilst overall AI patent filings have slowed, green AI patent publications grew 35% in 2023.