VendorsBarracuda
Barracuda
Cybersecurity reports and statistics published by Barracuda
8 categories5 reports
Research Reports
Reports and publications from Barracuda
Recent Statistics & Reports
48% of malicious email activity is phishing.
5/27/2026•
PhishingEmail Security
34% of companies experience at least one account takeover incident every month.
5/27/2026•
Account TakeoverIdentity RiskEmail Security
90% of high-volume phishing campaigns use phishing-as-a-service kits.
5/27/2026•
PhishingPhishing-as-a-Service
70% of malicious PDFs contain QR codes leading to phishing websites.
5/27/2026•
PhishingPDF ExploitsEmail Security
One in three email messages is malicious or unwanted spam.
5/27/2026•
Email SecuritySpam
More than 10% of HTML attachments are malicious.
5/27/2026•
Email AttachmentsHTML AttachmentsEmail Security
90% of ransomware incidents exploit firewalls through a CVE or a vulnerable account.
2/22/2026•
RansomwareFirewallCVE
96% of incidents involving lateral movement end with the release of ransomware.
2/22/2026•
RansomwareLateral Movement
66% of incidents involve the supply chain or a third party, up from 45% in 2024.
2/22/2026•
Supply ChainThird-Party Risk
The most widely detected vulnerability is CVE-2013-2566, which dates to 2013.
2/22/2026•
VulnerabilitiesCVE-2013-2566
11% of detected vulnerabilities have a known exploit.
2/22/2026•
VulnerabilitiesKnown ExploitExploit Risk
The fastest ransomware case observed, involving Akira ransomware, takes just three hours from breach to encryption.
2/22/2026•
RansomwareBreachEncryption
In 2025, 'polymorphic' attacks that varied the email header, body, and destination were seen in 20% of phishing attacks.
1/13/2026•
PhishingPhishing TechniquesPolymorphic
In 2025, malicious attachments were present in 18% of phishing attacks.
1/13/2026•
PhishingMalwarePhishing Techniques
In 2025, attacks bypassing multifactor authentication (MFA) were reported in 48% of phishing attacks.
1/13/2026•
PhishingMFAMFA Bypass
In 2025, malicious QR codes were observed in 19% of phishing attacks.
1/13/2026•
PhishingQR CodesPhishing Techniques
In 2025, obfuscations to hide URLs from detection were seen in 48% of phishing attacks.
1/13/2026•
PhishingPhishing TechniquesObfuscation
The number of known phishing kits doubled during 2025, reaching a significant increase in active use.
1/13/2026•
PhishingPhishing Kits
In 2025, 'ClickFix' social engineering techniques were used in 1% of phishing attacks.
1/13/2026•
PhishingPhishing TechniquesSocial Engineering
In 2025, 90% of high-volume phishing campaigns utilized Phishing-as-a-Service (PhaaS) kits.
1/13/2026•
PhishingPhishing KitsPhishing-as-a-Service
Showing 1-20 of 41 results