Email Remains the Top Attack Vector for Cyberattacks

A Barracuda report highlights a surge in email-borne threats: in February 2025, one in four emails was malicious or spam, with HTML attachments most weaponized (23% malicious; over three-quarters of malicious files were HTML). Attackers increasingly embed QR codes in PDFs and Microsoft 365 documents (68% and 83% of malicious samples, respectively) to drive phishing that steals credentials, while 20% of organizations face monthly account takeover incidents involving tactics like mailbox rule changes and spam sending; recommended defenses include MFA, security awareness training, and automated monitoring for suspicious activity.