Latest / The Digital Warfare Podcast / Digital Warfare Podcast Daily Brief June 04, 2026
Transcript
- Digital Warfare: You're listening to the Digital Warfare podcast. For the first time in internet history, automated traffic has officially surpassed human activity online. And the key issue is not simply that bots exist, it is that they now dominate the web. According to the latest Imperva and Thales bad bot research, bots accounted for more than 53% of all web traffic during 2025. Leaving human activity at just forty-seven percent. Even more concerning, nearly forty percent of all internet traffic is now classified as malicious bot activity. That statistic should get every security team's attention. Cause when most Internet traffic is no longer human, the security assumptions many organizations rely on begin to break down. Historically, automated bots performed useful functions. Search engine indexing, website monitoring, performance testing, content delivery optimization, but today's environment looks very different. Researchers report that AI driven bot attacks increased more than 12 times year over year, driven largely by advances in generative AI and autonomous agents. And this is where the story becomes more important. The newest generation of bots is no longer limited to simple Automation. They can mimic user behavior, navigate websites, interact with APEs, complete workflows, bypass traditional controls, and increasingly resemble legitimate users. That creates a major challenge for defenders. Because the problem is no longer identifying whether traffic is automated, the problem is determining what that automation is actually doing. Research has found that APIs have become one of the primary targets. Accounting for approximately twenty-seven percent of bot attacks. Financial services were particularly affected, experiencing nearly half of all account takeover activity linked to automated attacks. The reason is simple. Bots scale. Humans do not. An attacker can launch thousands of automated login attempts, scraping operations, account takeover campaigns, inventory abuse attacks. or reconnaissance operations simultaneously, and AI is lowering the skill barrier even further. Researchers note that AI powered tools now allow less sophisticated threat actors to create increasingly capable bots that can adapt, evade detection, and operate at scale. The largest strategic issue is trust. Much of the internet was designed around human interaction, authentication systems, user journeys, website analytics, customer engagement metrics, business transactions, Increasingly, organizations are discovering that many of those interactions are no longer human at all. Researchers also report growing volumes of AI crawlers, AI scrapers, and autonomous agents accessing websites to gather information, train models, retrieve content, and perform tasks on behalf of users. That means defenders face two challenges simultaneously: stopping malicious bots and distinguishing them from legitimate automation. For defenders, the response must evolve. First, organizations should focus on behavioral analysis rather than reputation alone. Second, AP should be treated as critical attack surfaces. Third, identity monitoring becomes increasingly important as account takeover activity continues growing. Fourth, enterprises should monitor abnormal automation patterns across customer-facing applications. And finally, security teams should prepare for a future where machines increasingly interact with other machines. Rather than humans. The strategic lesson is simple. The internet is no longer primarily a human environment. It is becoming an automated environment. And when bots outnumber people online, understanding intent becomes far more important than identifying automation itself. This has been your digital warfare daily brief. Stay secure. We'll see you tomorrow.