Radware Cyber Survey Uncovers Critical Weaknesses in Application Security Measures

Core Insights - The report highlights a significant gap in cybersecurity defenses, particularly against AI threats and API vulnerabilities, with only 8% of organizations currently utilizing AI-based protection solutions [3][17] - There is a growing concern regarding business logic attacks, with many organizations lacking adequate training and documentation to effectively mitigate these risks [6][17] Group 1: Cybersecurity Landscape - The weaponization of AI by malicious actors is intensifying cybersecurity threats, leading to increased vulnerabilities in web applications and APIs [4][17] - Organizations are experiencing a surge in API usage, with a 42% increase in 2025 compared to 2023, yet they remain poorly protected against associated risks [17] - Only 29% of security staff are fully trained to handle API business logic attacks, indicating a significant skills gap in the industry [6][17] Group 2: Organizational Preparedness - A lack of confidence in defensive measures is prevalent, with many organizations admitting to major concerns about their cybersecurity readiness [8][17] - On average, only 6% of organizations have full documentation for all their APIs, which complicates risk management [3][17] - Half of the respondents are unaware of the third-party code being used in their applications, raising concerns about data security [6][17] Group 3: Financial Implications - Downtime caused by application DDoS attacks can be costly, averaging $6,100 per minute or $366,000 per hour [17] - Organizations face high compliance pressures, with 54% expressing significant concern regarding various regulations [17]