A 21-month investigation led to the arrest in Japan and extradition to Germany of a Russian national accused of working as a Qilin developer. Investigators say victim reporting, forensic evidence, intelligence sharing and cryptocurrency analysis helped build the case.
A Barracuda survey of 2,000 IT and security decision-makers found that 38% of organizations lack expertise to secure and govern business AI, with larger gaps reported by some midmarket and AI-connected organizations.
Barracuda researchers describe a phishing campaign that routes victims through Microsoft services, then builds the phishing page locally with a blob URL. Service workers, sandboxed iframes and backend controls manage the workflow.
Barracuda Research describes a phishing campaign that uses a personalized DocuSign lure, CAPTCHA gating and an Adobe-themed prompt before a fake in-page Microsoft sign-in window harvests credentials.
Barracuda researchers describe how the Kali365 phishing kit uses device-code authentication and adversary-in-the-middle attacks to obtain Microsoft 365 sessions or tokens, even when victims complete genuine sign-in and MFA.
Barracuda threat data and a survey of 113 education-sector IT and security leaders found frequent phishing, elevated email-driven ransomware and account takeover, and slower incident investigation and recovery than overall averages.
Barracuda describes five blocked callback-phishing attacks using fake invoices, image-based lures, branded emails and calendar invites to prompt calls to scammers, and outlines how OCR, phone-number intelligence and other signals help detect them.
Barracuda’s SOC reports GlobalProtect scanning, credential-stuffing attempts against exposed VPN services, and a ScreenConnect RAT incident. It says scanning was blocked and an affected endpoint was isolated, and recommends patching, MFA, and tighter access controls.