Facebook
Twitter
LinkedIn
API insecurity and automated abuse by bots responsible for up to 11.8% of cyber events and losses globally
Bot-related security incident count rose 88% in 2022 and 28% in 2023
Insecure APIs result in up to $12 billion more in losses than they did in 2021
@Thales Imperva, a Thales company, the cybersecurity leader that protects critical applications, APIs, and data, anywhere at scale, releases the Economic Impact of API and Bot Attacks report. The analysis of more than 161,000 unique cybersecurity incidents and investigates the rising global costs of vulnerable or insecure APIs and automated abuse by bots, two security threats that are increasingly interconnected and prevalent. The report estimates that API insecurity and bot attacks result in up to $186[1] billion for businesses around the world.
The report is based on a study conducted by the Marsh McLennan Cyber Risk Intelligence Center which found that larger organizations were statistically more likely to have a higher percentage of security incidents that involved both insecure APIs and bot attacks. Enterprises with revenues of more than $1 billion were 2-3x more likely to experience automated API abuse by bots than small or mid-size businesses. The study suggests that large companies are particularly vulnerable to security risks associated with automated API abuse by bots because of complex and widespread API ecosystems that often contain exposed or insecure APIs.
Enterprises rely heavily on APIs to enable seamless communication between diverse applications and services. Data from Imperva Threat Research finds that the average enterprise managed 613 API endpoints in production last year. That number is growing rapidly as businesses face mounting pressure to deliver digital services with greater agility and efficiency.
Due to this increased reliance and their direct access to sensitive data, APIs have become attractive targets for bot operators. In 2023, automated threats accounted for 30% of all API attacks, according to data from Imperva Threat Research. Today, automated API abuse by bots costs organizations up to $17.9 billion of losses annually. As the number of APIs in production multiplies, cybercriminals will increasingly use automated bots to find and exploit API business logic, circumvent security measures, and exfiltrate sensitive data.
It's imperative that businesses across the world address the security risks posed by insecure APIs and bot attacks, or they face a substantial economic burden, says Nanhi Singh, General Manager of Application Security at Imperva, a Thales company. The interconnected nature of these threats necessitates that companies take a holistic approach, integrating comprehensive security strategies for both bot and API attacks.
Some of the key trends identified in the report include:
Increased API adoption and usage is growing the attack surface: The rapid adoption of APIs, inexperience of many API developers, and lack of collaboration between security and development teams has led insecure APIs to now result in up to $87 billion of losses annually, a $12 billion increase from 2021.
Bots negatively impact organizations' bottom line: The widespread availability of attack tools and generative AI models has enhanced bot evasion techniques and enabled even low-skilled attackers to launch sophisticated bot attacks. Up to $116 billion of losses annually can be attributed to automated attacks by bots.
API and bot-related security incidents are becoming more frequent: In 2022, API-related security incidents rose by 40%, and bot-related security incidents spiked by 88%. These increases were fueled by a rise in digital transactions, the expanding use of APIs, and geopolitical tensions like the Russia-Ukraine conflict. In the following year 2023, as digital traffic began to stabilize and the pandemic-driven surge in internet activity subsided, the frequency of these incidents moderated. API-related security incidents grew by 9%, while bot-related security incidents jumped by 28%. The overall upward trend in attacks highlights the growing persistence and frequency of these threats.
Insecure APIs and bot attacks pose a significant threat to large enterprises: Companies with revenue of at least $100 billion are most likely to suffer security incidents related to insecure APIs or bot attacks. These threats constitute up to 26% of all security incidents experienced by such businesses.
Countries around the globe are vulnerable to API and bot attacks: Brazil experienced the highest percentage of events related to insecure APIs or bot attacks, with the threats accounting for up to 32% of all observed security incidents. This was closely followed by France (up to 28%), Japan (up to 28%), and India (up to 26%). While the percentage of events attributed to API and bot-related security incidents was lower in the United States, 66% of all reported events related to vulnerable APIs or automated abuse by bots occurred within the country.
Reliance on APIs will continue to grow exponentially, driving connections to generative AI applications and large language models, adds Singh. At the same time, generative AI will also empower cybercriminals to create sophisticated bots at an accelerated and alarming rate. As API ecosystems expand and bots become more advanced, organizations should anticipate a significant rise in the economic impact of automated API abuse by bots unless proactive measures are taken.
Additional Information:
Download a copy of the The Economic Impact of API and Bot Attacks report for additional insights on the business impact of API and bot-related security incidents.
See how Imperva Advanced Bot Protection and API Security can protect websites, applications, and APIs from automated attacks and without affecting the flo
Europe Stories
05/01/2027
Worlds first 802.15.4ab-UWB chip verified by Calterah and Rohde & Schwarz to be ...
07/10/2026
Dalet, a leading technology and service provider for media-rich organizations, today announced the latest Long-Term Supported (LTS) release of Dalet Flex. Build...
06/09/2026
June 9 2026, 23:00 (PDT) Dolby and MagentaTV Bring Fans Closer to the FIFA Worl...
04/08/2026
Dalet, a leading technology and service provider for media-rich organizations, t...
25/07/2026
New app turns vocal percussion into polished loops
Vochlea, the company behind the voice-to-MIDI instrument Dubler 2, have just announced the launch of a ne...
25/07/2026
Saturday 25 July 2026
First look revealed for YAGA, a seductive mystery thrille...
24/07/2026
First string library captured at Studio Richter Mahr
The latest sample library to be created at Max Richter's Studio Richter Mahr facility captures the ...
24/07/2026
Official emulation of Blackbird Studios reverb chamber
In their latest collaboration with Blackbird Studios, KIT Plugins have captured the sound of the Stud...
24/07/2026
Angela Gomez brings over 14 years of experience in broadcast communications and audio engineering, specialising in live outside broadcasts, live sports and larg...
24/07/2026
Article courtesy of postPerspective
Read the article
While Toy Story 5 maintai...
24/07/2026
Kerry and Mayo fans Up For The Match as excitement builds in Croke Park on the e...
23/07/2026
Staines-upon-Thames, UK, 23rd, JULY, 2026 - Yospace, the trusted leader in Dynamic Ad Insertion (DAI), stitched 11.57 billion one-to-one addressable advertisem...
23/07/2026
Quickly creates reverse reverb effects
Low End Candy have recently released a new plug-in that offers a quick and simple way to create reverse reverb effect...
23/07/2026
New engines, resonators, effects & more
Expressive E's versatile soft synth has just been treated to an update that greatly expands its sonic range. Noi...
23/07/2026
SGL Carbon has further expanded its photovoltaic capacity at its Ort im Innkreis site in Austria. With the commissioning of new PV carports, the sites solar sys...
23/07/2026
Rohde & Schwarz presents new software for three-phase power analysis on MXO seri...
23/07/2026
In our latest blog, Laura Rognoni explores how the launch of Play Snooker reflects a wider shift in sports economics - from monetising peak broadcast audiences ...
23/07/2026
Download Now!
To receive a short case study showcasing Vivid Broadcast's audio setup, please enter the following details:
--
First Name* First Name ...
23/07/2026
X-Rite Pantone and Fashion Institute of Technology (FIT) Partner to Advance Digi...
23/07/2026
Thursday 23 July 2026
New Samsung Galaxy Foldable range available now to pre-order on Sky Mobile
Sky Mobile, the award-winning network voted this year by Expe...
23/07/2026
Thursday 23 July 2026
Jason Statham leads Sky Original action thriller MUTINY in explosive new trailerTurn on cookies to view this content. Go to Privacy optio...
23/07/2026
Wuppertal July 23, 2026
Riedel Implements RefCam and Easy5G for the First Time...
23/07/2026
RT Commercial has today announced Centra as the official food partner once again of The Traitors Ireland, coming to RT One and RT Player later this year.
Ce...
23/07/2026
RT Commercial today announced Honda as sponsor of Today with David McCullagh RT Radio 1, weekdays 9am 11am.
Broadcasting directly after Morning Ireland in ...
23/07/2026
RT News is pleased to announce Barry Gallagher has been assigned as the new journalist covering news from Cork, Kerry and the wider Southern region
Working al...
22/07/2026
Library now available in Engine Player
Another of Eduardo Tarilonte's popular sample libraries has just been moved over to Engine Audio's Engine Pla...
22/07/2026
All-in-one mic & DSP interface overhauled
Cloudvocal have just refreshed the design of their all-in-one mic, audio interface and DSP processor, introducing ...
22/07/2026
The final boss of the lost dual-op-amp circuit
Electro-Harmonix have just introduced the Deluxe Big Muff Pi 2, which they say offers their latest take on t...
22/07/2026
eds3_5_jq(document).ready(function($) { $(#eds_sliderM519).chameleonSlider_2_1({ content_source:......
22/07/2026
A poisoned spy, a secret war, and a small English city contaminated by a deadly chemical weapon. Available on Sky Documentaries from 4 AugustWednesday 22 July 2...
22/07/2026
Audio at Parity: Comscore Launches Transcript-Level Targeting and Measurement wi...
22/07/2026
Arvato Systems and Lobster Enter into a Partnership and Combine the Integration Platform and Managed Services
Flexible integration solutions for cloud, hybrid...
22/07/2026
RT REPORTS NET SURPLUS OF 22.5 MILLION IN 2025...
22/07/2026
In the Opinion of the Censor airs Monday 27 July at 9.35pm on RT One and RT Player
In the Opinion of the Censor looks at how films for theatrical release wer...
21/07/2026
New research involving a cross-section of Mongolias independent media landscape finds enthusiasm for AI as a tool to improve efficiency, sustainability and resi...
21/07/2026
High-end analogue channel strip boasts plug-in recall
Originally revealed as a prototype back at NAMM 2024, the Channex Studio channel strip represented a b...
21/07/2026
Relies on same DSP as plug-in range
Musik Hack's line-up has been influenced heavily by founder Stan Greene's work as a mixing engineer, and their M...
21/07/2026
Official collaboration with boutique builder Dirty Boy Pedals
Warm Audio have just announced the launch of a new guitar pedal range created in collaboration...
21/07/2026
Rohde & Schwarz showcases broad range of EMC test solutions at EMC SIPI 2026 in ...
21/07/2026
X-Rite Pantone and NIFT Partner to Build Color Management Skills for India's...
21/07/2026
Harmonics cOS Virtualized Broadband Platform and Pearl Remote OLTs Enable Flexible PON Migration, While SeaStar Optical Node Powers Cost-Effective Multi-Gigabit...
21/07/2026
160 hours of Irish storytelling for 2026
KIN and The Walsh Sisters return
RT has today unveiled its most ambitious drama slate ever, with a record-breakin...
20/07/2026
Product range now readily available in the UK
Graph Tech Guitar Labs have just announced the launch of a new UK Online Store that makes it quicker and easie...
20/07/2026
Popular headset gains active noise cancellation
The Maxwell headet was Audeze's first foray into the gaming world, and thanks to its Dolby Atmos compati...
20/07/2026
Monday 20 July 2026
Sky brings free global roaming to millions of loyal custome...
20/07/2026
Red Seat Ventures Announces Introduction of Premium Creator and Podcast Communit...
20/07/2026
FIFA World Cup Final sets new RT Player record as the most-streamed single event in the platform's history
Over 1 million viewers watched live on RT 2 as ...
19/07/2026
Channel strip plug-in gets upgraded
Acustica Audio's vintage-inspired channel strip plug-in has just been treated to an update that expands its tonal ra...
18/07/2026
Captures nine sought-after Fender amps
IK Multimedia's latest TONEX expansion captures a selection of nine rare Brown Panel' Fender amps that were ...
Facebook 
