CAMBRIDGE, Mass., July  15, 2026  (GLOBE NEWSWIRE) -- An evolution toward agentic commerce and autonomous AI tools has made commerce the world’s most targeted industry by cybercriminals, according to the latest Akamai

AKAM

Akamai Research: Commerce Becomes the Epicenter for AI Bot Attacks and Agentic Fraud in 2026

Akamai SOTI findings highlight AI bot risks boosting security demand

<section class="insight" data-version="1">
 <section data-block="information">
 <h3>Information</h3>
 CAMBRIDGE, Mass., July 15, 2026 (GLOBE NEWSWIRE) -- An evolution toward agentic commerce and autonomous AI tools has made commerce the world’s most targeted industry by cybercriminals, according to the latest Akamai
 </section>

 <section data-block="ai-summary-paragraph">
 <h3>AI Summary</h3>
 Akamai&#039;s SOTI security report shows AI bots comprising 47.9% of commerce traffic and rising Layer 7 threats, underscoring growing security risks in agentic commerce. The study urges risk-based bot governance, microsegmentation, and behavioral biometrics, signaling stronger demand for Akamai&#039;s security offerings. This could translate into near- to mid-term revenue tailwinds for AKAM as enterprises invest in protective infrastructure.
 </section>

 <section data-block="ai-summary-bullets">
 <h3>Key Points</h3>
 <ul><li>AI bots are 47.9% of commerce traffic on Akamai&#039;s network.</li><li>Layer 7 DDoS and API attacks escalate in 2025.</li><li>API incidents rose 9% YoY; 85% saw exposure; 22% know exposed APIs.</li><li>Retail accounted for 84% of Layer 7 DDoS traffic.</li><li>Mitigation focuses on revenue mapping, microsegmentation, and risk-based controls.</li></ul>
 </section>

 <section data-block="companies-mentioned">
 <h3>Companies Mentioned</h3>
 <ul><li>Akamai Technologies (AKAM): Primary subject; SOTI findings highlight market opportunity for Akamai&#039;s security solutions.</li><li>OpenAI (N/A): Top AI bot observed; underscores risk and potential demand for bot management and secure commerce.</li><li>ByteDance (N/A): Noted among top AI bots; indicates broader threat landscape that AKAM products may mitigate.</li><li>Anthropic (N/A): Listed as a leading AI bot actor; supports case for AI-enabled threats and security tooling demand.</li></ul>
 </section>

 <section data-block="category">
 <h3>Industry News</h3>
 Industry News. Reflects Akamai&#039;s SOTI findings and the evolving threat landscape driving security-technology demand.
 </section>

 <section data-block="market-moving">
 <h3>Market-Moving</h3>
 <ul><li>AI bot traffic growth expands the addressable market for Akamai&#039;s security offerings.</li><li>API vulnerabilities and DDoS threats may accelerate demand for AKAM services.</li><li>Regional bot activity upticks could drive additional AKAM deployments and ARR.</li></ul>
 </section>

 <section data-block="key-facts">
 <h3>Key Facts</h3>
 <ul><li>As of Dec 2025, 47.9% of commerce traffic on Akamai&#039;s network is AI bots.</li><li>Layer 7 DDoS attacks targeted commerce nearly 3 trillion times in 2025; 84% in retail.</li><li>AI training crawlers account for &gt;70% of AI bot triggers in commerce.</li><li>85% of commerce respondents experienced at least one API-related incident; 22% know which APIs expose data.</li><li>Phishing volume across commerce endpoints rose from 56,600 (Feb) to 134,600 (Apr).</li></ul>
 </section>

 <section data-block="trading-thesis">
 <h3>Trading Thesis</h3>
 Bullish on AKAM over 6–12 months as security spending accelerates amid AI-bot and API risks.
 </section>
</section>


<link type="text/css" rel="stylesheet" href="https://www.globenewswire.com/styles/gnw_nitf.css"></link>CAMBRIDGE, Mass., July 15, 2026 (GLOBE NEWSWIRE) -- An evolution toward agentic commerce and autonomous AI tools has made commerce the world’s most targeted industry by cybercriminals, according to the latest Akamai (NASDAQ:<a class="ticker" href="https://www.benzinga.com/quote/AKAM">AKAM</a>) State of the Internet (SOTI) security report, <a href="https://www.globenewswire.com/Tracker?data=FXygTMqkxzDpri1OO4ka_5K528hyx_PHw_tyrft_nQGcQ8QMkZy7kxGVmhoxj9pcXUAeFYqCUxkOw0iuG6XCBEgl6mfchgjCDpoh5lc1kLHZ4aQKpF724z6hilqyKIAVJwEK-LEBtoZpHo-qhwEnOkHCwmhACIdvJX_Dui6j-8JK4za6juIZbkwcKvb9bsuxLnq7lDHLIS45a_xm3rkzHu6twHI1iBjfKtro6-jjfG8=" rel="nofollow" target="_blank">Securing the Agentic Storefront: Attacks on Commerce.</a> The report highlights that, as of December 2025, nearly half (47.9%) of all commerce traffic across Akamai’s global network now consists of AI bots. Furthermore, the industry continues to suffer a relentless barrage of application-layer (Layer 7) distributed denial-of-service (DDoS) activity, malicious web application exploits, and a dangerous narrowing of the gap between traditional application attacks and API-targeted exploits. "We are securing a digital frontier where the ‘customer’ is increasingly an AI agent operating on behalf of the human user," said Patrick Sullivan, Chief Technology Officer of Security Strategy at Akamai. "This report reveals how and why security leaders must embrace ‘agentic readiness,’ to architect sites that welcome legitimate AI while aggressively shutting down malicious bots." Additional key findings include: <ul type="disc"><li>The rise of agentic commerce fraud: Autonomous AI shopping agents are creating a signal masking problem by perfectly mimicking human microbehaviors, according to guest contributor Pam Lindemoen, Chief Security Officer and Vice President of Strategy at RH-ISAC. Threat actors are now using agent hijacking tactics to compromise legitimate AI assistants and abuse stored payment credentials. They are also deploying large language models (LLMs) to create synthetic identity fraud in the form of "Frankenstein" accounts that easily bypass static defenses. </li><li>The unchecked influx of AI bots: Driven by LLM development, AI training crawlers account for more than 70% of AI bot triggers in commerce. OpenAI, ByteDance, and Anthropic rank as the top three AI bots observed. Commerce organizations placed more than 90% of their AI bot activity in the "monitor" category but allowed three-quarters of the remaining activity to pass unrestricted, exposing themselves to underlying risks. </li><li>API exposure and vulnerabilities: Web attacks targeting APIs rose by 9% year over year. In fact, Akamai’s <a href="https://www.akamai.com/lp/report/api-security-study-2026" rel="nofollow" target="_blank">2026 API Security Impact Study</a> revealed that 85% of commerce respondents experienced at least one API-related incident in the past year, yet only 22% know which of their APIs expose sensitive data. </li><li>Layer 7 DDoS attacks escalate: Commerce was targeted by Layer 7 DDoS attacks nearly 3 trillion times in 2025, with the retail vertical bearing 84% of that volume. Attackers are using HTTP botnets to flood APIs during high-stakes holiday surges and exhaust app servers and halt sales. </li><li>Industrialized phishing and malware pipelines: Between November 2025 and April 2026, malware represented 56.5% of observed endpoint threat activity, followed by phishing at 37.6%. Average daily phishing volume across commerce customers skyrocketed from 56,600 in February to 134,600 in April, serving as the primary raw material powering account takeover (ATO) and loyalty point theft. </li></ul> Regional trends Automated bot activity and web attacks varied by region: <ul type="disc"><li>North America and EMEA: These mature markets saw modest bot increases (7% and 16%, respectively) but significant holiday-driven web attacks, with North America leading AI bot activity with 33 billion counts. </li><li>APAC and LATAM: Bot activity surged by 63% in APAC and 48% in LATAM. APAC’s fragmented travel market and loyalty programs made it a primary target for bot and Layer 7 DDoS attacks. </li></ul> Mitigation strategies To effectively counter these evolving threats, Securing the Agentic Storefront: Attacks on Commerce provides a strategic roadmap for CISOs. Recommendations include: <ul type="disc"><li>Map the revenue chain: Continuously discover and inventory the API estate to clear up critical visibility gaps regarding sensitive data exposure. </li><li>Govern automation: Move away from binary "allow/block" models toward risk-based governance that categorizes bots by intent and business value. </li><li>Minimize the blast radius: Implement microsegmentation to eliminate lateral movement. Although 92% of organizations use basic network segmentation, only 35% have progressed to true microsegmentation. </li><li>Establish cooperative resilience: Integrate cybersecurity and fraud prevention teams to deploy real-time behavioral biometrics, risk-based multi-factor authentication, and automated kill switches to freeze compromised accounts instantly. </li></ul> Now in their 12th year, Akamai SOTI Security reports continue to offer critical insights on cybersecurity trends and web performance, drawn from attacks viewed across Akamai’s cybersecurity protective infrastructure, which handles a significant portion of global web traffic. About Akamai Akamai is the cybersecurity and cloud computing company that powers and protects business online. Our market-leading security solutions, superior threat intelligence, and global operations team provide defense in depth to safeguard enterprise data and applications everywhere. Akamai’s full-stack cloud computing solutions deliver performance and affordability on the world’s most distributed platform. Global enterprises trust Akamai to provide the industry-leading reliability, scale, and expertise they need to grow their business with conﬁdence. Learn more at <a href="https://www.globenewswire.com/Tracker?data=0ttRb25TcuCGa02Un7GPnTngc6ziraoVGh85k4eGbsAWEQg8VZc8zwPOxQKELjVCMGfa4riU7IPM4zetsOhSXQ==" rel="nofollow" target="_blank">akamai.com</a> and <a href="https://www.globenewswire.com/Tracker?data=0ttRb25TcuCGa02Un7GPnWU8iW_0OfI2Dku-7ERhWvROioMNpTBmzwjsnUMQ0_HmUbBxhQygvp1ooe2Fg1Vflj9sFCJ7QMOdF50GeY1F0Us=" rel="nofollow" target="_blank">akamai.com/blog</a>, or follow Akamai Technologies on <a href="https://www.globenewswire.com/Tracker?data=mAg3ucWDztDER3ndgjvXK8U3fvKb5M9CpmVmevWjBQKQsl09TB2L9g0hafhRAzhIShZWpr2-tccFQyabqMtHgA==" rel="nofollow" target="_blank">X</a> and <a href="https://www.globenewswire.com/Tracker?data=QPDowD15_HGVGt1IkOlhtluhCiF2rWwl18m7re_HjlkAlUcjaM7Mur4jH85qbxyQmn_K_w0LLjfiweaAC_-RfiyVwZMueNo38kePAuce79ykdID5qvWUX0yrYh6Fc-46brSKiDVgrUqB3UmVwlbXUA==" rel="nofollow" target="_blank">LinkedIn</a>. Contacts Akamai Media Relations <a href="https://www.globenewswire.com/Tracker?data=0ttRb25TcuCGa02Un7GPnS9NDSB_KbdjdIf3jcQARt0JuG3j3G8tph8HyvhZv5xsFnRthRgiNjkds_crJefKnFA9ibeDxVBr5BvCbB9-pD0=" rel="nofollow" target="_blank">akamaipr@akamai.com</a> Akamai Investor Relations <a href="https://www.globenewswire.com/Tracker?data=5LFsTeAlUykuYI7A71BoXTAAm4SySKl5A2U4m2Duqu3gjOqNaYEt-a_Lwa2nyx3uXzgxB_ICo83-C1uHSBl7CUGFyc4jCpXq7uwhSGye-0k=" rel="nofollow" target="_blank">invrel@akamai.com</a> <img alt="" class="__GNW8366DE3E__IMG" src="https://www.globenewswire.com/newsroom/ti?nf=OTc2MTIxOCM3NzAzMzkzIzIwMDQ1Mzc="></img> <img alt="" src="https://ml.globenewswire.com/media/NTUyZDBjNDgtYWUyOC00MTRhLTkzNjgtMjBiOGY2YTgxOTNkLTEwMTYxMTAtMjAyNi0wNy0xNS1lbg==/tiny/Akamai-Technologies-Inc-.png" referrerpolicy="no-referrer-when-downgrade"></img><a href="https://www.globenewswire.com/NewsRoom/AttachmentNg/4ce7685a-3da0-416d-9bc1-58cc8b7812b8"><img src="https://ml.globenewswire.com/media/4ce7685a-3da0-416d-9bc1-58cc8b7812b8/small/akamai-logo-color-rgb-bluenavy-png.png" border="0" width="150" height="74" alt="Primary Logo"></img></a>

Akamai's SOTI security report shows AI bots comprising 47.9% of commerce traffic and rising Layer 7 threats, underscoring growing security risks in agentic commerce. The study urges risk-based bot governance, microsegmentation, and behavioral biometrics, signaling stronger demand for Akamai's security offerings. This could translate into near- to mid-term revenue tailwinds for AKAM as enterprises invest in protective infrastructure.

Akamai Research: Commerce Becomes the Epicenter for AI Bot Attacks and Agentic Fraud in 2026

AI Summary

Sentiment Rationale

Trading Thesis

Market-Moving

Key Facts

Companies Mentioned

Industry News

Related News