AI can scale the volume and personalisation of attacks to a point where cybercriminals are able to be more targeted and are harder to detect. Rohit Aradhya, VP Engineering & Managing Director, Barracuda Networks India discusses exclusively with Bhavya Bagga, Business Reporter, CXO Media & APAC Media that those organisations investing now in layered, platform-based security, with the ability to detect and respond quickly will be more resilient.
How is Barracuda leveraging AI and machine learning to strengthen threat detection, response automation, and predictive security capabilities?
Barracuda uses AI and machine learning to take over the parts of security that demand speed, scale and pattern recognition. These are areas where AI outperforms humans simply because the volume and velocity of threat signals are too high for analysts to process manually.
Barracuda’s AI-enhanced threat detection analyses data across email, networks, cloud, and applications, allowing us to detect malicious behaviour that traditional signature-based tools often miss.
Our models focus on understanding intent, patterns and anomalies including unusual account behaviour or evasive phishing techniques, so threats can be identified earlier and more accurately.
The role AI plays in automating responses, triaging threats and triggering protective actions in real-time, not only reduces burden on security teams. It also underpins more predictive security, helping organisations anticipate emerging attack techniques rather than merely reacting to incidents.
Managed Service Providers (MSPs) are becoming central to cybersecurity adoption. What tools or platforms is Barracuda developing to empower MSPs with automation and visibility?
Barracuda solutions are designed with MSPs in mind to help them manage security at scale while maintaining visibility into customer risk and posture.
For example, our integrated automation can reduce the amount of repetitive, low-value tasks that currently absorbs an MSPs technician’s time. Through embedded automation, natural language queries and intelligent reporting, MSPs can oversee solutions, accounts, licences and threat response across their customer base from a single, centralised view.
This more unified way of working supports faster day-to-day operations, reduces unnecessary switching between tools and improves overall efficiency. Through our centralised dashboards, Barracuda gives MSPs clear visibility across all customer environments.
As generative AI tools become widely adopted, how is Barracuda addressing the security risks associated with AI-generated content and automated workflows?
The security risk of generative AI is twofold: the first being the use of genAI within organisations and the second is how threat actors are leveraging AI to elevate their attacks. Employees are increasingly using AI tools at work, often without formal approval or oversight. This ‘shadow AI’ brings with it additional risks as sensitive data is shared with external parties without appropriate controls. Barracuda has the capability of inspecting the domains being accessed, assessing the severity of the site, tracking the usage, and enforcing policies in real-time.
As for threat actors, we are seeing AI being used to create more convincing phishing, faster social engineering and automated misuse of trusted platforms. Barracuda is addressing the risks by focusing on how these tools change attacker behaviour. For example, detecting subtle indicators of deception and abuse across email, collaboration tools, and cloud workflows.
At the same time, we help organisations secure AI-enabled automation by strengthening identity protections, access controls and monitoring around how data and privileges are used, ensuring innovation doesn’t come at the cost of security or trust.
Looking ahead, what emerging cyber threats should enterprises start preparing for today to remain secure in the next decade?
Enterprises should prepare for threats that increasingly evade traditional security controls. We can expect AI to scale the volume and personalisation of attacks to a point where cybercriminals are able to be more targeted and are harder to detect. The organisations that will be most resilient are those investing now in layered, platform-based security, with the ability to detect and respond quickly when something unusual happens – even if it looks legitimate on the surface. Conversation has moved towards threat resiliency over threat detection., it is important to understand how resilient your business is in case of an attack and how fast can it recover.
Attackers are not always relying on revolutionary tools, however, take advantage of weaknesses that enterprises might overlook. Strengthen existing controls that are often perceived as ‘basic’ like identity can be critical in maintaining security posture. This includes enforcing preventative solutions such as multi-factor authentication and monitoring logins for suspicious behaviour. Especially in an AI driven future it is essential to centralize identity & access and let AI continuously monitor for abnormal behaviour.
As MD & VP, how do you balance global cybersecurity innovation priorities with the unique needs of regional markets like India and South Asia?
There are certain aspects of cybersecurity that are universal. Our BarracudaONE platform is a good example of an innovation that meets a global universal need for integrated power, visibility and resilience with reduced complexity.
As a global company with strong local leadership and relationships, Barracuda listens closely to partners and customers in individual markets.
Markets like India and South Asia have unique regulatory, business, and operational realities, so we focus on adapting deployment models, pricing and support to reflect how organisations operate on the ground. At the same time, we ensure customers benefit from the same advanced threat intelligence and AI driven innovations developed globally, creating solutions that are both locally relevant and globally robust.
India’s digital transformation is accelerating across BFSI, healthcare, and government. Which industries are driving the highest demand for cybersecurity solutions?
A common theme across all industry sectors is the growing use of digital technologies. This includes the handling and storage of sensitive data and the need to ensure operational continuity and service reliability.
Some sectors are more resource-constrained than others, for example education; face a critical need for operational continuity, such as infrastructure or manufacturing; or function in environments where downtime might literally be a case of life-or-death, such as healthcare. Effective cybersecurity is essential in every industry especially small and medium businesses which are resource starved.
Many organisations, regardless of their industry sector, struggle with legacy systems and tools that do not effectively protect against the types of cyberattacks we’re seeing today or the volume of attacks. Across the board we are seeing a shift from piecing together basic security tools to an integrated, platform-based approach that can scale with growth and evolving threats.
