Developers - Seeing increase in Threat Actions?

I work in the financial services industries. Over the last month, we have been hit with a barrage of quite honestly impressive infiltration attempts. Curious if anyone else is seeing the same thing or if my company was singled out. It's been a LOT of super late nights and early mornings.

Through the years, I've dealt with generic fraud at scale, normally at a transactional level where they're just trying to find valid account numbers. But these attacks these last few weeks have been significantly more sophisticated towards trying to load malicious javascript and perform remote code execution on servers. In some cases, they're rotating IP addresses each request so the WAF doesn't really see it as a DDOS attempt nor suspicious. There are tons of fuzzing attempts which return a non 200 HTTP Status.

We did have a layoff about a month ago. We suspect it was a developer that knew exactly what to target. But not even an ounce of a bread crumb to provide any proof. Just generic suspicion.

Whoever it was, wasn't able to exfiltrate anything of value. Our WAF prevented the vast majority of the traffic, but firewalls seem to only capture so much. We have some really robust segmentation with multiple layers and encryption to our environment. The web facing layer is designed specifically to not allow any information to be targeted. This is honestly what saved us.

Anyways, just curious if any of you IT folks have seen an uptick in malicious behavior or if it's just me.