Radware's Cyber Threat Report: Web DDoS Attacks Surge 550% in 2024

Core Insights - Radware released its 2025 Global Threat Analysis Report, highlighting significant changes in the threat landscape driven by geopolitical conflicts, complex threat surfaces, and the impact of AI on cyberattacks [1][3] Threat Landscape Overview - The report indicates that multiple factors contributed to the escalation of cyber threats in 2024, including geopolitical tensions and the accessibility of sophisticated attack tools [3] - AI has lowered barriers to entry for cybercriminals, increasing the number of adversaries and enabling novice actors to launch successful attacks [3] DDoS Attack Trends - Layer 7 (L7) Web DDoS attacks surged, primarily linked to hacktivist groups motivated by geopolitical issues [4] - The volume, frequency, and duration of network DDoS attacks more than doubled since 2022, indicating a significant escalation in threat levels [4] - Total Web DDoS attacks increased by 550% compared to 2023, with EMEA accounting for 78% of global incidents [6] Industry-Specific Impacts - The financial sector experienced a nearly 400% year-over-year growth in DDoS attack volume, with telecommunications and transportation also facing significant increases [5][6] - North America faced 66% of web application and API attacks, highlighting a concentrated threat in this region [5][7] Attack Characteristics - The average duration of network DDoS attacks increased by 37% over 2023, with the average mitigated attack volume rising by 120% [6] - Hacktivist claims rose by 20% globally, with government institutions being the top targets [5][14] Vulnerability Exploitation - Attackers are increasingly exploiting known vulnerabilities in web applications and APIs, with vulnerability exploitation comprising over one-third of all malicious requests [8][14] - The financial sector accounted for 44% of total L7 DNS attack activity, indicating a targeted approach by cybercriminals [7][14]