This video is a decorative animation with no sound.
This chart is based on data from Barracuda AI.
Barracuda Research delivers actionable insights from trillions of IT events, AI-powered threat detection and real-world security incidents. Our advanced threat intelligence empowers IT security professionals with the knowledge to identify emerging threats, recognize the warning signs and implement effective protection strategies for their businesses.
Attackers are abusing QR codes, collaboration tools and subtle link tricks to slip phishing and fraud past traditional email defenses.
See the details and the action to take to protect against the attacks:
The number of known Phishing‑as‑a‑Service (PhaaS) kits doubled last year, with newcomers becoming increasingly sophisticated, evasive and stealthy — bypassing MFA, hiding links and more.
See the details and the action to take to protect against the attacks:
GhostFrame is a new phishing kit that has already launched over a million attacks. It uses a simple, harmless-looking HTML file, with all the malicious activity taking place inside an iframe.
See the details and the action to take to protect against the attacks:
See the details and the action to take to protect against the attacks:
Attackers are exploiting overlooked devices, stale accounts and trusted tools to move quickly and quietly inside businesses.
See the details and the action to take to protect against the attacks:
Attackers are targeting businesses at scale by exploiting common vulnerabilities and everyday security blind spots.
See the details and the action to take to protect against the attacks:
Attackers are exploiting trusted browser extensions to quietly spy on users and steal sensitive data.
See the details and the action to take to protect against the attacks:
Agentic AI is making cyberattacks faster, more adaptive and harder to stop.
As attackers target identity systems, AI is becoming critical for spotting and stopping suspicious activity in real time.
Cybercriminals are accelerating their use of vulnerability exploits, social engineering, stolen credentials, and AI‑powered phishing — making rapid detection and layered defenses more critical than ever.
The Qilin ransomware group is accelerating this year, rapidly increasing its victim count with attacks across a wide variety of sectors.
The Office of the CTO comprises Barracuda’s leading threat researchers and technical experts who can provide authoritative insight on a wide variety of cybersecurity topics.
These include:
Connect with Barracuda’s Office of the CTO
“An agentic AI operator will run cyberattacks end-to-end, gathering what it needs, crafting convincing lures, trying a path, watching how the target’s protection or defense reacts, then quietly shifting tactics and timing until it gets what it wants.”
Yaz Bekkar
Principal Consulting Architect – XDR, EMEA
Frontline security predictions 2026: The battle for reality and control in a world of agentic AI
“What makes targets vulnerable is often easy to overlook — a single rogue device, an account that wasn’t disabled when someone left, a dormant application that hasn’t been updated, or a misconfigured security feature. Attackers only need to find one to succeed.”
Merium Khalid
Director – SOC Offensive Security
Barracuda provides a wide range of cyberthreat and cybersecurity insights, tools and support to help organizations and security researchers better understand the rapidly evolving threat landscape and how to manage risk.
Company Information
Our Websites