Israel tops the list of targets for political cyber attacks

The report describes an increasing transition of state and national conflicts to the digital space. Ideological attack groups are running prolonged campaigns of DDoS attacks against government websites, critical infrastructures and commercial companies. Sometimes they even publish real-time messages accepting responsibility on dedicated Telegram channels. During 2025, approximately 16 thousand unique attack reports from such groups were recorded, a figure which illustrates continuous and coordinated activity.

Globally, the volume of denial-of-service attacks at the network level jumped 168% in one year. In the second half of 2025 alone, an average Redware customer experienced more than 25,000 attacks of this type. The meaning, according to the report, is a transition from one-off attacks to continuous attacks almost as a routine.

A sharp increase was also recorded in the application arena. Malicious activity against websites, digital services and APIs increased by more than 120% compared to the previous year. Berdware points out that the application layer has become the central attack arena, since it allows attackers to directly damage the core of business activity, customer service and critical systems.

Alongside this, the report highlights an increase in the operational and business risk for organizations operating in the online arena. The technology, communication and financial services sectors are among the main targets for attacks, along with trading platforms and large-scale digital services. Another phenomenon that makes it difficult to deal with is the short duration of many of the attacks. Some last less than a minute, which requires automatic defense systems capable of detecting and blocking an attack in real time, without Dependence on manual intervention.

The report also indicates a significant increase in the activity of malicious bots, which increased by approximately 92% in the past year. According to the company, the availability of generative artificial intelligence tools also allows parties with limited resources to launch large-scale automated attacks. These include attempts to take over user accounts, massive collection of information from websites and attempts to reconnect to systems.

Bradvar estimates that the trends registered in 2025 will not stop in the near future. Application-focused attacks, automated activity and the use of the digital space as a tool in state struggles are expected to become a permanent part of the activity environment of governments, companies and organizations around the world, and in particular in Israel.