<h1>Vendor H1 2025 report: surge in API attacks, widespread DDoS and unpatched critical vulnerabilities raising regulatory and liability risks</h1> A security vendor's report for H1 2025 states millions of application-layer attacks in the jurisdiction, including a 126% rise in API attacks, widespread DDoS and bot activity, and thousands of critical vulnerabilities-one-third unpatched over six months. The findings highlight regulatory exposure (heightened scrutiny from financial regulators), increased breach and outage risk, and potential liability for organizations failing to remediate vulnerabilities promptly. The report promotes managed WAAP and AI-driven remediation as cost-efficient mitigation to reduce mean time to remediate, limit compliance penalties, and minimize reputational and operational losses.