Financial Services at Risk: DDoS Attacks Are Bigger, Longer, and More Complex, Akamai Research Finds
Rhea-AI Summary
Akamai (NASDAQ: AKAM) released its May 20, 2026 State of the Internet Security report focused on financial services. The research finds cybercriminals and pro-Iran hacktivists increasingly using AI-driven DDoS and bots against banking, payments, APIs, and applications, with median DDoS duration up 738% since 2024.
Key data points include high rates of API incidents, banking-focused web and API attacks, widespread ransomware exposure, a 147% surge in advanced bot activity, and distinct regional attack patterns.
AI-generated analysis. Not financial advice.
Positive
- None.
Negative
- None.
News Market Reaction – AKAM
On the day this news was published, AKAM gained 1.26%, reflecting a mild positive market reaction.
Data tracked by StockTitan Argus on the day of publication.
Key Figures
Market Reality Check
Peers on Argus
AKAM fell 6.25% while most close software/security peers were down more modestly (e.g., SAIL -2.3%, OKTA -3.43%, RBRK -2.44%) and FFIV rose 1.45%, pointing to a stock-specific move rather than a broad sector shift.
Historical Context
| Date | Event | Sentiment | Move | Catalyst |
|---|---|---|---|---|
| May 19 | AI product launch | Positive | -6.3% | Introduced AI Brand Presence to optimize content for AI search and agents. |
| May 18 | Convertible note offering | Negative | -6.3% | Announced $1.3B 2030 and $1.3B 2032 0% convertible senior notes. |
| May 14 | AI security acquisition | Negative | -3.4% | Planned $205M LayerX acquisition, dilutive to 2026 non-GAAP EPS by $0.12. |
| May 07 | Q1 2026 earnings | Positive | +26.6% | Reported $1.074B revenue, strong security growth and large CIS commitment. |
| May 05 | API security launch | Positive | +11.5% | Launched Security Posture Center and code-to-runtime mapping for APIs. |
Price reactions typically align with the tone of news, with only one recent divergence where seemingly positive AI product news coincided with a notable decline.
Over recent months, Akamai has combined product innovation with larger strategic and financing moves. On May 5 and May 7, 2026, new API security offerings and strong Q1 results drove gains of 11.5% and 26.58%. An announced LayerX acquisition and a sizable convertible notes offering in mid-May were followed by declines of 3.39% and 6.25%. The latest AI Brand Presence launch on May 19 saw another 6.25% drop, showing mixed market reception to growth and AI-focused initiatives.
Market Pulse Summary
This announcement highlights Akamai’s research on escalating DDoS and API attacks against financial services, with median attack durations up 738% and 96% of surveyed leaders reporting API incidents. These trends frame the strategic relevance of Akamai’s recent security product launches and its focus on protecting critical banking and payment infrastructure. Investors may watch how such threat intelligence translates into demand for security offerings, alongside the impact of recent financing and acquisition decisions on growth and earnings metrics.
Key Terms
ddos technical
api technical
layer 4 technical
layer 7 technical
ransomware technical
botnets technical
dns technical
AI-generated analysis. Not financial advice.
Pro-Iran hacktivism and AI bots are amplifying cyberattacks targeting online banking, payments, and applications
CAMBRIDGE, Mass., May 20, 2026 (GLOBE NEWSWIRE) -- Cybercriminals are now targeting financial services more than any other industry for web and API (Layers 3 and 4) distributed denial-of-service (DDoS) attacks, Akamai (NASDAQ: AKAM) reveals in its AI-Empowered Botnets and API Visibility Gaps: Attack Trends in Financial Services State of the Internet (SOTI) Security report. The findings highlight a dangerous shift as pro-Iran hacktivists and AI-driven bots weaponize DDoS tactics to disrupt online banking, payment systems, and critical applications.
Driven by AI-powered infrastructure, the median duration of global Layers 3 and 4 DDoS attacks targeting the financial services sector is up
Key findings of the report include:
- Among the financial service leaders surveyed for the 2026 API Security Impact Study,
96% reported at least one API security incident over the past 12 months, the highest among all industries. - In 2025,
60% of total web attacks and83% of incursions against API endpoints targeted banking. - Nearly
80% of financial institutions have faced ransomware attacks in the past two years, yet less than half have adopted advanced security technologies. - Advanced bot activity surged by
147% in late 2025 — and, in one case study, a staggering96% of all site traffic was identified as malicious scraping bots. - Cyberattack methods against financial services vary significantly by region: EMEA is the primary target for Layers 3 and 4 DDoS (
62% ), APAC is the most targeted by Layer 7 DDoS (52% ), and in North America, web attacks are the most prevalent (44% ).
“Cybercriminals and hacktivists continue to escalate DDoS from nuisance attacks to a sustained siege encompassing both hacktivism and cybercrime, and financial services are in the crosshairs," said Steve Winterfeld, Advisory CISO of Akamai. “In addition, the data shows that APIs are increasingly targeted as AI doesn't reduce traditional security risks, it puts them on steroids. Fortunately, financial services organizations can leverage the security strategies and best practices detailed in this report."
AI-Empowered Botnets and API Visibility Gaps: Attack Trends in Financial Services also includes: data-supported trends on criminal activity, a guest column by the CISO of FS-ISAC, a security spotlight on MITRE capabilities, a cloud spotlight on the differences among AI architectures, and practical DNS and DDoS attack mitigation strategies.
Now in their 12th year, Akamai’s SOTI Security reports continue to offer critical insights on cybersecurity trends and web performance, drawn from attacks viewed across Akamai’s cybersecurity protective infrastructure, which handles a significant portion of global web traffic.
About Akamai
Akamai is the cybersecurity and cloud computing company that powers and protects business online. Our market-leading security solutions, superior threat intelligence, and global operations team provide defense in depth to safeguard enterprise data and applications everywhere. Akamai’s full-stack cloud computing solutions deliver performance and affordability on the world’s most distributed platform. Global enterprises trust Akamai to provide the industry-leading reliability, scale, and expertise they need to grow their business with confidence. Learn more at akamai.com and akamai.com/blog, or follow Akamai Technologies on X and LinkedIn.
Contacts
Akamai Media Relations
akamaipr@akamai.com
Akamai Investor Relations
invrel@akamai.com
