Akamai Report: Commerce Most Targeted by Cybercriminals; AI Bots 48% of Traffic
Akamai's latest State of the Internet security report, "Securing the Agentic Storefront: Attacks on Commerce," reveals that the commerce industry is the most targeted by cybercriminals, driven by the rise of agentic commerce and autonomous AI tools. The report highlights that nearly half (47.9%) of all commerce traffic on Akamai's global network in December 2025 consisted of AI bots. Additionally, the industry faces a relentless barrage of application-layer DDoS activity, malicious web application exploits, and a 9% year-over-year increase in API-targeted attacks. Akamai emphasizes the need for security leaders to embrace "agentic readiness" to manage legitimate AI while aggressively combating malicious bots.
Key Highlights
- Commerce is the world's most targeted industry by cybercriminals.
- Nearly half (47.9%) of all commerce traffic in Dec 2025 consisted of AI bots.
- AI training crawlers account for over 70% of AI bot triggers in commerce.
- Web attacks targeting APIs rose by 9% year over year.
- 85% of commerce respondents experienced at least one API-related incident.
- Commerce was targeted by Layer 7 DDoS attacks nearly 3 trillion times in 2025.
- Malware represented 56.5% of endpoint threat activity between Nov 2025 and Apr 2026.
- Daily phishing volume for commerce customers surged from 56,600 to 134,600.
Price Impact
More from AKAM