Facebook
Twitter
LinkedIn
API insecurity and automated abuse by bots responsible for up to 11.8% of cyber events and losses globally
Bot-related security incident count rose 88% in 2022 and 28% in 2023
Insecure APIs result in up to $12 billion more in losses than they did in 2021
@Thales Imperva, a Thales company, the cybersecurity leader that protects critical applications, APIs, and data, anywhere at scale, releases the Economic Impact of API and Bot Attacks report. The analysis of more than 161,000 unique cybersecurity incidents and investigates the rising global costs of vulnerable or insecure APIs and automated abuse by bots, two security threats that are increasingly interconnected and prevalent. The report estimates that API insecurity and bot attacks result in up to $186[1] billion for businesses around the world.
The report is based on a study conducted by the Marsh McLennan Cyber Risk Intelligence Center which found that larger organizations were statistically more likely to have a higher percentage of security incidents that involved both insecure APIs and bot attacks. Enterprises with revenues of more than $1 billion were 2-3x more likely to experience automated API abuse by bots than small or mid-size businesses. The study suggests that large companies are particularly vulnerable to security risks associated with automated API abuse by bots because of complex and widespread API ecosystems that often contain exposed or insecure APIs.
Enterprises rely heavily on APIs to enable seamless communication between diverse applications and services. Data from Imperva Threat Research finds that the average enterprise managed 613 API endpoints in production last year. That number is growing rapidly as businesses face mounting pressure to deliver digital services with greater agility and efficiency.
Due to this increased reliance and their direct access to sensitive data, APIs have become attractive targets for bot operators. In 2023, automated threats accounted for 30% of all API attacks, according to data from Imperva Threat Research. Today, automated API abuse by bots costs organizations up to $17.9 billion of losses annually. As the number of APIs in production multiplies, cybercriminals will increasingly use automated bots to find and exploit API business logic, circumvent security measures, and exfiltrate sensitive data.
It's imperative that businesses across the world address the security risks posed by insecure APIs and bot attacks, or they face a substantial economic burden, says Nanhi Singh, General Manager of Application Security at Imperva, a Thales company. The interconnected nature of these threats necessitates that companies take a holistic approach, integrating comprehensive security strategies for both bot and API attacks.
Some of the key trends identified in the report include:
Increased API adoption and usage is growing the attack surface: The rapid adoption of APIs, inexperience of many API developers, and lack of collaboration between security and development teams has led insecure APIs to now result in up to $87 billion of losses annually, a $12 billion increase from 2021.
Bots negatively impact organizations' bottom line: The widespread availability of attack tools and generative AI models has enhanced bot evasion techniques and enabled even low-skilled attackers to launch sophisticated bot attacks. Up to $116 billion of losses annually can be attributed to automated attacks by bots.
API and bot-related security incidents are becoming more frequent: In 2022, API-related security incidents rose by 40%, and bot-related security incidents spiked by 88%. These increases were fueled by a rise in digital transactions, the expanding use of APIs, and geopolitical tensions like the Russia-Ukraine conflict. In the following year 2023, as digital traffic began to stabilize and the pandemic-driven surge in internet activity subsided, the frequency of these incidents moderated. API-related security incidents grew by 9%, while bot-related security incidents jumped by 28%. The overall upward trend in attacks highlights the growing persistence and frequency of these threats.
Insecure APIs and bot attacks pose a significant threat to large enterprises: Companies with revenue of at least $100 billion are most likely to suffer security incidents related to insecure APIs or bot attacks. These threats constitute up to 26% of all security incidents experienced by such businesses.
Countries around the globe are vulnerable to API and bot attacks: Brazil experienced the highest percentage of events related to insecure APIs or bot attacks, with the threats accounting for up to 32% of all observed security incidents. This was closely followed by France (up to 28%), Japan (up to 28%), and India (up to 26%). While the percentage of events attributed to API and bot-related security incidents was lower in the United States, 66% of all reported events related to vulnerable APIs or automated abuse by bots occurred within the country.
Reliance on APIs will continue to grow exponentially, driving connections to generative AI applications and large language models, adds Singh. At the same time, generative AI will also empower cybercriminals to create sophisticated bots at an accelerated and alarming rate. As API ecosystems expand and bots become more advanced, organizations should anticipate a significant rise in the economic impact of automated API abuse by bots unless proactive measures are taken.
Additional Information:
Download a copy of the The Economic Impact of API and Bot Attacks report for additional insights on the business impact of API and bot-related security incidents.
See how Imperva Advanced Bot Protection and API Security can protect websites, applications, and APIs from automated attacks and without affecting the flo
Europe Stories
09/12/2024
Dalet, a leading technology and service provider for media-rich organizations, today announced that it has been named an IDC Innovator in the IDC Innovators: ...
09/11/2024
Dalet, a leading technology and service provider for media-rich organizations, today announced three new members of its executive team. Tara Bryant joins as Chi...
19/09/2024
The sale will ensure the studios continues to achieve its potential into the future, said the council
By Matthew Corrigan
Published: September 19, 2024
Th...
18/09/2024
Johnny Vegas & Lucy Beaumont and Babatunde Al sh & Kae Kurd arethecomedians taking part in brand new episodes of World's Most Dangerous Roads, which return...
18/09/2024
The nation's favourite comedy channel, Gold, is set to take a reflective loo...
18/09/2024
Press Release: ToolsOnAir Wins 2024 OEM & Developer Award from Blackmagic Design...
18/09/2024
Apoyar a los artistas emergentes es parte fundamental del ADN de Spotify. Ahora ...
18/09/2024
Supporting emerging artists is a fundamental part of Spotify's DNA, and we&#...
18/09/2024
eds3_5_jq(document).ready(function($) { $(#eds_sliderM519).chameleonSlider_2_1({...
18/09/2024
RT News is pleased to confirm the appointment of RT journalist, Marc O'Driscoll, as North East Correspondent, covering for his colleague Laura Hogan for t...
18/09/2024
Photo credit: Mitsubishi Heavy Industries, Ltd
Press release - 18 September 20...
18/09/2024
iPadOS 18 makes the iPad experience more versatile and intelligent than ever, and is available today as a free software update. iPadOS 18 brings incredible new ...
18/09/2024
Facebook
Twitter
LinkedIn
Thales As announced on the 17 September 2024 ...
18/09/2024
Facebook
Twitter
LinkedIn
API insecurity and automated abuse by bots responsible for up to 11.8% of cyber events and losses globally
Bot-related security...
17/09/2024
UKTV today releases a selection of first look images captured in Jersey for the upcoming re-imagined series of Bergerac (6x60') for U and U&DRAMA. The six-p...
17/09/2024
Set in a call center in Bristol, England, the television sitcom Ruby Speaking focuses on the eponymous Ruby (played by Jayde Adams) and her colleagues. It'...
17/09/2024
The advert was worked on by Rodeo FXs teams in Montreal and Paris
By Jenny Priestley
Published: September 17, 2024
The advert was worked on by Rodeo FX...
17/09/2024
Organisers have also confirmed the dates for IBC2025
By TVBEurope Staff
Published: September 17, 2024
Organisers have also confirmed the dates for IBC2025...
17/09/2024
By TVBEurope Staff
Published: September 17, 2024 Updated: September 18, 2024
During the TVBEurope team's meetings with vendors at IBC2024, we asked e...
17/09/2024
X-Rite ColorDesigner PLUS Helps Paint Manufacturers and Retailers Improve Paint ...
17/09/2024
Rohde & Schwarz joins forces with fiveD, an innovation leader in hyper-realistic...
17/09/2024
With the release of iOS 18, iPadOS 18, macOS Sequoia, and watchOS 11 today, Apple Maps is introducing new features to help users explore and find places they lo...
17/09/2024
Facebook
Twitter
LinkedIn
On 17 September 2024, Thales Australia and Denma...
17/09/2024
Facebook
Twitter
LinkedIn
The inclusion of Thales in this index reflects the Groups accelerating progress in terms of social and environmental responsibil...
16/09/2024
UKTV and Everyone TV - the organisation leading the evolution of free TV in the ...
16/09/2024
visionOS 2 is available today, bringing new spatial computing experiences to Apple Vision Pro users around the world. Existing photos can now be turned into spa...
16/09/2024
The awards recognise women and companies who are stand-out performers, innovators and leaders in the industry
By TVBEurope Staff
Published: September 16, 202...
16/09/2024
By Jenny Priestley
Published: September 15, 2024 Updated: September 18, 2024
Future's Best of Show at IBC2024 awards have been announced, with exhibi...
16/09/2024
RT RETURNS NET DEFICIT OF 9.1 MILLION IN 2023 A CHALLENGING YEAR FOR THE ORGANISATION
A DECLINE IN TV LICENCE REVENUES, ALONG WITH AN INCREASE IN OPERATING...
16/09/2024
RT Investigates to air revealing documentary on immigration protests in Ireland
Never before seen footage
- In a change to scheduled programming
Prote...
16/09/2024
16 Sep 2024
VEON Delegation Attends 2024 YES Annual Meeting, Discusses Investme...
16/09/2024
cetecom advanced re-certifies Rohde & Schwarzs eCall PSAP for testing and collab...
16/09/2024
SAN JOSE, Calif. - Sept. 16, 2024 - Harmonic (NASDAQ: HLIT) today announced that the company will demonstrate its intelligent ecosystem for fiber and DOCSIS net...
16/09/2024
Arvato Systems and advanco Launch Comprehensive Partnership
Arvato Systems and advanco Combine Serialization Solutions Arvato CSDB and ARC
G tersloh - Arvato...
16/09/2024
Facebook
Twitter
LinkedIn
On the International Identity Day ID Day', ...
14/09/2024
At Spotify, our live experiences are curated cultural moments that get people ta...
14/09/2024
Photo credit: GETTY IMAGES
Press release - 14 September 2024 12:59
Eutelsat ...
13/09/2024
Spotify is committed to bringing the best listening experience to all our users, and that includes parents and families. That's why we've introduced a p...
13/09/2024
As fans patiently await their favorite artists' new album releases, the anti...
13/09/2024
What I've always loved about his films is that incredible warmth and that incredible imagination, cinematographer Haris Zambarloukos, BSC, GSC says of dire...
13/09/2024
Revolution in Storage: EditShare Reveals Game-Changing New Line Up at IBC 2024
More power, more speed, more flexibility, more capacity, more security, more co...
13/09/2024
Both appointees join the company following extensive careers in the industry
By Matthew Corrigan
Published: September 13, 2024 Updated: September 16, 2024 ...
13/09/2024
The 2061 also offers simplicity, durability and reliability combined with DPA's natural sound. We launched the 2061 to appeal to audio professionals who ar...
13/09/2024
13 Sep 2024
VEON General Counsel Omiyinka Doris Named Among Top 15 Legal Leader...
13/09/2024
Sky Studios Elstree opens Sky Up Academy to inspire 10,000 students a year to pu...
13/09/2024
Countering the autonomous aerial threat In an interview, Martin Woywod, Product Manager Counter-UAS (CUAS) Systems, Rohde & Schwarz , talks about the need for...
13/09/2024
Amsterdam September 13, 2024
WDR Relies on Riedel Backbone for Remote Production of UEFA Euro 2024The German regional public broadcaster Westdeutscher Rundfu...
13/09/2024
Amsterdam September 13, 2024
Riedel Expands Its Range of NSA Network Stream AdaptersRiedel Communications today announced the launch of two new additions to i...
Facebook 
