This video is a decorative animation with no sound.
Empowering IT security professionals with actionable threat intelligence
This chart is based on data from Barracuda AI.
Barracuda Research delivers actionable insights from trillions of IT events, AI-powered threat detection and real-world security incidents. Our advanced threat intelligence empowers IT security professionals with the knowledge to identify emerging threats, recognize the warning signs and implement effective protection strategies for their businesses.
A controlled attack by Barracuda’s red team shows how a single compromised AI-enabled account can escalate into CEO compromise and wire-transfer fraud.
For more details and how to stay safe:
Barracuda researchers detected over one million phishing attacks using “text-salting” techniques – such as reducing font size to zero - to fool both traditional and AI-powered email security systems.
For more details and how to stay safe:
AI‑driven social engineering and phishing‑as‑a‑service are accelerating the volume and effectiveness of email attacks, with threat actors shifting to stealth tactics like URL‑based payloads, QR codes and account takeover.
See the details and the action to take to protect against evolving tactics:
New Barracuda research details the top security flaws found in web applications that could be exploited by attackers to steal data, compromise accounts or gain unauthorized access to systems.
See the details and the steps to take to stay safe:
Attackers are increasingly using trusted calendar invites and .ics files to bypass traditional email-focused phishing defences.
See the details and the steps to take to stay safe:
Barracuda researchers encountered an email attack featuring a single button that behaved differently depending on where the user clicks. This is a rarely seen technique used to evade automated link analysis and ensure testing tools can only see the safe version.
See how the attack unfolds and the signs to look for:
The Gentlemen is a highly active, financially motivated ransomware-as-a-service (RaaS) double-extortion operation. It relies on proven techniques and vulnerable edge devices to steal credentials and data.
Recent third-party research shows that many ransomware incidents now include explicit threats of physical harm, often directed at employees or executives if payment is not made.
Shadow AI – where employees use unapproved AI tools – is mainstream. Untracked AI use increases data exposure, compliance risk and loss of visibility.
The Office of the CTO comprises Barracuda’s leading threat researchers and technical experts who can provide authoritative insight on a wide variety of cybersecurity topics.
These include:
Connect with Barracuda’s Office of the CTO
“Dwell time, the gap between intrusion and impact, is collapsing. What used to take attackers weeks now takes hours, and AI tooling is shrinking it further. For years we have optimized for better detection. That is no longer enough.”
Adam Khan
VP, Global Security Operations at Barracuda
“Email is no longer just a communication channel — it’s the front line of identity, trust and business continuity. As attackers industrialize phishing with AI and phishing‑as‑a‑service, the future of defense must evolve just as quickly.”
Merium Khalid
Director of SOC Offensive Security, Office of the CTO, Barracuda
Barracuda provides a wide range of cyberthreat and cybersecurity insights, tools and support to help organizations and security researchers better understand the rapidly evolving threat landscape and how to manage risk.
Company Information
Our Websites