Barracuda Networks reports rise in sophisticated phishing and web vulnerabilities

Research from Barracuda Networks highlights an evolution in cyber threats, specifically regarding sophisticated phishing techniques and widespread web application vulnerabilities.

Phishing attacks are increasingly utilizing artificial intelligence, automation, and cloud services. One prominent method identified is ‘text salting,’ where attackers embed large amounts of benign, hidden text within emails. This technique is designed to confuse AI-based security filters by diluting suspicious terms and making the email appear legitimate to automated scanners while the visible content targets users with lures like gift cards or loyalty points.

Additionally, analysis of web applications reveals that the average application contains approximately 20 security vulnerabilities. These flaws often stem from preventable misconfigurations. Key vulnerabilities include information disclosure (25%), brand impersonation and spoofing (23%), and client-side attacks such as browser exploitation (14%). These weaknesses allow attackers to map environments, steal credentials, or execute malicious scripts to compromise user sessions.