The Buzz: Canada ranks second globally for ransomware, Top Down closes $38M MSP fund, and Barracuda maps the new email threat landscape

Welcome to The Buzz from ChannelBuzz.ca, I’m Robert Dutt, today is Tuesday, May 12, 2026, and here’s what’s happening in the channel today.

Top Down Ventures has announced the final close of its Founders Fund I, pulling in 38 million Canadian dollars and oversubscribing its original target. According to the firm, this is the first institutional fund focused exclusively on early-stage software and artificial intelligence for the managed service provider ecosystem, which it values as a roughly 1 trillion dollar global IT services category. The fund is backed by a limited partner base of more than 100 MSP operators, including distribution giant Pax8. Top Down noted that closing the fund in the current economic environment was a challenge, but the oversubscription signals clear institutional interest in the MSP software space. The firm also pointed to its first exit as a proof point – zofiQ, an agentic AI platform for MSP service desks, was acquired by ConnectWise just six months after Top Down’s initial investment, returning 5.3 times the invested capital. Having dedicated institutional capital purpose-built for the ecosystem means the next generation of MSP tooling gets funded by people who actually understand the problem. For solution providers thinking about where the platform wars are heading over the next five years, this fund is part of that story.

New data released yesterday by Fortinet paints a stark picture of Canada’s position in the global threat landscape. According to the company’s 2026 Global Threat Landscape Report and its companion 2026 Cybersecurity Skills Gap Report, Canada has moved from third to second globally in ransomware attacks, with 374 Canadian organizations extorted last year. Total cyberattacks against Canadian targets surged to 17 billion in 2025, up from 13.7 billion the year before. Fortinet’s FortiGuard Labs says the time-to-exploit for critical vulnerabilities is now running two to four times faster than it was, driven by threat actors deploying agentic AI to accelerate reconnaissance and execution. The skills picture compounds the problem: 47 percent of Canadian IT leaders cited a lack of cybersecurity talent as a top cause of breaches, and 49 percent say they struggle to hire staff with specific AI security experience. That combination – faster attacks, a shrinking talent pool – is exactly the kind of environment where a strong MSP security practice becomes a business necessity for SMB clients, not a nice-to-have. Derek Manky, chief security strategist and global vice president of threat intelligence at FortiGuard Labs, called it an “industrialized defense” challenge.

New research from Barracuda released this morning adds another dimension to the threat picture. Based on an analysis of 3.1 billion emails, the company’s 2026 Email Threats Report finds that one in three emails is now malicious or unwanted spam. According to Barracuda, 48 percent of malicious email activity is phishing, 34 percent of organizations experience account takeover at least once per month, and 90 percent of high-volume phishing campaigns now use phishing-as-a-service kits. Perhaps most notable for the managed services conversation: 70 percent of malicious PDFs now hide phishing links inside QR codes, a tactic specifically designed to bypass traditional email filters. Barracuda positions the core finding as a shift in attacker strategy – away from noisy malware and toward stealthier, trust-based techniques that use compromised accounts and familiar file formats to slip past defenses. The report identifies growing demand for layered email and identity protection combined with automated response, which points directly to an opportunity for service providers helping customers with lean IT teams who are already stretched managing alert volume.

In Brief – Calian Group has completed its acquisition of U.S. managed service provider Computex, expanding the Ottawa-based firm’s American footprint and cybersecurity capabilities. Crogl has begun a private rollout of its AI-powered SOC platform, positioning it to help service providers automate threat response and cut alert fatigue. Pax8 and NinjaOne have announced a partnership starting as a referral motion, giving MSPs a path to RMM and unified IT operations tools while the companies work toward future marketplace integration. TD SYNNEX has given MSPs reserved access to NVIDIA GPU capacity through a deal with Nebius AI Cloud, letting channel partners deliver AI infrastructure services without buying hardware or competing with hyperscalers for GPU supply. Full details and links in the show notes or the blog post.

Later today on In The Channel, I sit down with Joel Abramson, managing partner at Top Down Ventures, to go deeper on the Founders Fund close – the LP flywheel strategy, the zofiQ exit, and what it means for the companies building the next generation of MSP software.

And if you missed it yesterday, check out my conversation with Steven Kiss, partner and national ServiceNow practice leader at EY Canada, on what building Canada’s first ServiceNow elite partner teaches you about what is coming next in the agentic enterprise.

That’s how we’re seeing the headlines today. I’m Robert Dutt for ChannelBuzz.ca, thanks for listening. Have a great day.