Radware_Threat_Report_2026_RWI-6283.pdf

The Radware 2026 Global Threat Analysis summarizes 2025 as a watershed year: massive revival of network-layer DDoS (up to 29.7 Tbps) combined with a surge in smaller, frequent Web DDoS and automated application/API attacks driven by democratized DDoS-as-a-service and generative AI; pervasive bad-bot and OTP-bot activity fueling account takeover and cashout chains; active exploitation of vulnerabilities (including named CVEs) and emergent AI-specific threats such as ShadowLeak (service-side IPI data exfiltration) and ZombieAgent (persistent agent compromise), with hacktivist campaigns remaining a major geopolitical force.