{"id":4709,"date":"2026-10-01T07:00:12","date_gmt":"2026-10-01T14:00:12","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/?post_type=reports&#038;p=4709"},"modified":"2026-10-02T13:04:57","modified_gmt":"2026-10-02T20:04:57","slug":"microsoft-digital-defense-report","status":"publish","type":"reports","link":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/","title":{"rendered":"Microsoft Digital Defense Report 2026"},"content":{"rendered":"<main data-bi-ct=\"group\" class=\"wp-block-group alignfull is-style-default has-white-color has-text-color has-link-color microsoft-breakpoint-id-xjzatmrld wp-elements-bed68b7cdf040346651a49de3dc1d84d has-global-padding is-layout-constrained wp-container-core-group-is-layout-ee2332cf wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"xjzatmrld\"><section data-bi-ct=\"group\" style=\"background-image:url('https:\/\/celacampaindev.wpenginepowered.com\/wp-content\/uploads\/2026\/09\/bcbfcc53c7f9bdb8fd342f56d3b42de0c071f43b-1.jpg');background-size:cover;\" class=\"wp-block-group alignfull microsoft-breakpoint-id-dk7ndzswq has-global-padding is-layout-constrained wp-block-group-is-layout-constrained has-background\" id=\"defense-report\" data-microsoft-breakpoint-id=\"dk7ndzswq\"><div data-bi-ct=\"group\" class=\"wp-block-group alignfull temp-heroblur has-microsoft-midnight-gradient-background has-background microsoft-breakpoint-id-7t1t60ilm has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"7t1t60ilm\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-9t80v0wop is-vertical is-layout-flex wp-container-core-group-is-layout-00d0a736 wp-block-group-is-layout-flex\" style=\"min-height:85vh;padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"9t80v0wop\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-2swimul5c has-global-padding is-layout-constrained wp-container-core-group-is-layout-60993ebc wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"2swimul5c\"><h1 class=\"wp-block-heading alignwide has-display-large-fluid-font-size\" style=\"margin-bottom:var(--wp--preset--spacing--xl-fluid)\">Microsoft Digital Defense Report 2026<\/h1>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-01fbda8d wp-block-group-is-layout-constrained\"><p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"margin-bottom:var(--wp--preset--spacing--2-xl-fluid)\">In an era of interconnected&nbsp;risk, attackers are increasingly exploiting the trusted identities, systems, relationships, and services organizations rely on most. The 2026 Microsoft Digital Defense Report reveals a fundamental shift in cybersecurity with the interconnected digital ecosystem and the rise of AI. This report helps organizations decode what is needed to secure AI and build resilience across the interconnected systems they depend on.&nbsp; &#8203;<\/p>\n<\/div>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button is-style-outline mobile-full-width is-style-outline--1\" style=\"width:50%\"><a data-bi-an=\"Additional report topics\" data-bi-ct=\"button\" data-bi-dlid=\"ms_digital_defense_report_2025_v1\" data-bi-dlnm=\"Microsoft Digital Defense Report 2025\" data-bi-dltype=\"pdf\" data-bi-ehn=\"Microsoft Digital Defense Report 2025\" data-bi-hn=\"Microsoft Digital Defense Report 2025\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Read the full report\">Read the full report<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button is-style-outline mobile-full-width is-style-outline--2\" style=\"width:50%\"><a data-bi-an=\"Additional report topics\" data-bi-ct=\"button\" data-bi-dlid=\"ms_digital_defense_report_2025_v1\" data-bi-dlnm=\"Microsoft Digital Defense Report 2025\" data-bi-dltype=\"pdf\" data-bi-ehn=\"Microsoft Digital Defense Report 2025\" data-bi-hn=\"Microsoft Digital Defense Report 2025\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/aka.ms\/MDDR2026_ExecutiveSummary\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Read the executive summary\">Read the executive summary<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignfull has-white-color has-black-background-color has-text-color has-background has-link-color microsoft-breakpoint-id-qsbdmkj0l wp-elements-9fc1c523a7fbd059c626fb6b30d560c3 has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"padding-top:var(--wp--preset--spacing--sm);padding-bottom:var(--wp--preset--spacing--sm)\" data-microsoft-breakpoint-id=\"qsbdmkj0l\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-pdr6qwlky is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-55421fed wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"pdr6qwlky\"><p class=\"has-body-sm-font-size wp-block-paragraph\" style=\"font-style:normal;font-weight:600;letter-spacing:6px;text-transform:uppercase\">Share<\/p>\n\n\n<div style=\"--social-share-foreground-color: #152237;--social-share-background-color: #fff\" class=\"social-share social-share--size-medium wp-block-microsoft-social-share-social-share\" data-wp-interactive=\"microsoft-social-share\">\n\n\t\n\t<ul class=\"social-share__list\">\n\t\t\t\t\t<li class=\"social-share__item\">\n\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/www.linkedin.com\/sharing\/share-offsite\/?url=https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fcorporate-responsibility%2Ftopics%2Fcybersecurity%2Freports%2Fmicrosoft-digital-defense-report%2F\" aria-label=\"Share on LinkedIn\" target=\"_blank\" rel=\"noreferrer noopener\" class=\"social-share__link social-share--linkedin\" data-bi-socchn=\"Linkedin\" data-bi-cn=\"Share Linkedin\" data-bi-ecn=\"Share Linkedin\" data-bi-hn=\"Microsoft Digital Defense Report 2025\" data-bi-ehn=\"Microsoft Digital Defense Report 2025\" data-bi-an=\"Microsoft Digital Defense Report 2025\" data-bi-ct=\"socialshare\">\n\t\t\t\t\t\t<span aria-hidden=\"true\" class=\"microsoft-social-share-svg\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"0 0 24 25\"><path fill=\"var(--social-share-background-color)\" d=\"M10.998.412c-8.922.654-13.956 10.862-9.123 18.441 4.752 7.45 15.734 7.369 20.336-.18C27.345 10.256 20.754-.294 10.998.422zM8.918 16.68h-2.24V9.311h2.24zm.08-9.22c-.753 1.902-3.617.14-2.16-1.43.935-1.007 2.713.04 2.16 1.43m8.46 9.22h-2.24v-4.53s-.18-.493-.221-.553c-.402-.685-1.608-.614-2.05.03-.15.211-.321.775-.321 1.017v4.036h-2.24V9.311h2.17v.986c.763-1.017 1.778-1.288 3.014-1.087 1.004.161 1.889 1.248 1.889 2.255v5.234-.02Z\"><\/path><\/svg><\/span>\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t<li class=\"social-share__item\">\n\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/twitter.com\/intent\/tweet?url=https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fcorporate-responsibility%2Ftopics%2Fcybersecurity%2Freports%2Fmicrosoft-digital-defense-report%2F&amp;text=Microsoft+Digital+Defense+Report+2026\" aria-label=\"Share on X\" target=\"_blank\" rel=\"noreferrer noopener\" class=\"social-share__link social-share--x\" data-bi-socchn=\"X\" data-bi-cn=\"Share X\" data-bi-ecn=\"Share X\" data-bi-hn=\"Microsoft Digital Defense Report 2025\" data-bi-ehn=\"Microsoft Digital Defense Report 2025\" data-bi-an=\"Microsoft Digital Defense Report 2025\" data-bi-ct=\"socialshare\">\n\t\t\t\t\t\t<span aria-hidden=\"true\" class=\"microsoft-social-share-svg\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"0 0 24 24\"><circle cx=\"12.366\" cy=\"11.635\" r=\"11.635\" fill=\"var(--social-share-background-color)\"><\/circle><path fill=\"var(--social-share-foreground-color)\" d=\"m13.474 10.745 4.331-4.927H16.78l-3.763 4.277-3.003-4.278H6.548l4.543 6.47-4.543 5.165h1.026l3.972-4.518 3.172 4.519h3.465l-4.71-6.708Zm-5.53-4.17h1.577l2.956 4.136.46.645 3.842 5.376h-1.577z\"><\/path><\/svg><\/span>\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t<li class=\"social-share__item\">\n\t\t\t\t\t\t\t\t\t<div class=\"social-share__copy-wrapper\" data-wp-context='\n\t\t\t\t\t\t{\"copyUrl\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/topics\\\/cybersecurity\\\/reports\\\/microsoft-digital-defense-report\\\/\",\"showTooltip\":false,\"tooltipShift\":\"0px\"}\t\t\t\t\t\t'>\n\t\t\t\t\t\t<a href=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/\" aria-label=\"Copy share link\" class=\"social-share__link social-share--share-link copy-link\" data-wp-on--click=\"actions.copyToClipboard\" id=\"share-link-6ac14df726078\" data-bi-socchn=\"Share\" data-bi-cn=\"Share Share\" data-bi-ecn=\"Share Share\" data-bi-hn=\"Microsoft Digital Defense Report 2025\" data-bi-ehn=\"Microsoft Digital Defense Report 2025\" data-bi-an=\"Microsoft Digital Defense Report 2025\" data-bi-ct=\"socialshare\">\n\t\t\t\t\t\t\t<span aria-hidden=\"true\" class=\"microsoft-social-share-svg\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"32\" height=\"32\" fill=\"none\"><path stroke=\"var(--social-share-background-color)\" stroke-miterlimit=\"10\" stroke-width=\"2\" d=\"m18.274 24.009-4.003 4.002c-3.032 3.033-7.963 3.033-10.996 0s-3.033-7.964 0-10.997l4.002-4.002m3.981 6.995 9.016-8.995m-7.258-3.735 4.002-4.002c3.033-3.033 7.964-3.033 10.997 0s3.033 7.964 0 10.996l-4.003 4.003\"><\/path><\/svg><\/span>\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t<span class=\"social-share__copy-notice\" data-wp-class--is-visible=\"state.isTooltipVisible\" data-wp-style----tooltip-shift=\"context.tooltipShift\" data-wp-init=\"callbacks.initTooltip\">\n\t\t\t\t\t\t\tLink copied to clipboard!\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/li>\n\t\t\t<\/ul>\n<\/div>\n<\/div>\n<\/div>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull has-deep-blue-background-color has-background microsoft-breakpoint-id-q0wnwbp8z has-global-padding is-layout-constrained wp-container-core-group-is-layout-11a3232a wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"q0wnwbp8z\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-ir3qxmzvx is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"ir3qxmzvx\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-ght0p2chs is-layout-flow wp-container-core-group-is-layout-f16a04fa wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"ght0p2chs\"><h2 class=\"wp-block-heading has-text-align-center has-body-4-xl-fluid-font-size\" style=\"padding-top:0;padding-bottom:0\">Our unique vantage point<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group has-body-xl-fluid-font-size microsoft-breakpoint-id-kdm7kpswm has-global-padding is-layout-constrained wp-container-core-group-is-layout-036af449 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"kdm7kpswm\"><p class=\"has-text-align-center has-body-large-fluid-font-size wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs)\">Microsoft&rsquo;s global presence&mdash;spanning billions of users, millions of organizations, and a vast network of partners&mdash;provides us with an unparalleled perspective on the cybersecurity threat landscape.&#8203;<\/p>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-dny8gj7su is-layout-grid wp-container-core-group-is-layout-38047f66 wp-block-group-is-layout-grid\" style=\"padding-top:var(--wp--preset--spacing--sm);padding-bottom:var(--wp--preset--spacing--sm)\" data-microsoft-breakpoint-id=\"dny8gj7su\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-uihobfsjr has-global-padding is-layout-constrained wp-container-core-group-is-layout-4db71cd5 wp-block-group-is-layout-constrained\" style=\"min-height:%\" data-microsoft-breakpoint-id=\"uihobfsjr\"><h3 class=\"wp-block-heading has-text-align-center has-light-blue-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-d62daa1c6361b42e74164614f5654a86\">165+ trillion<\/h3>\n\n\n<p class=\"has-text-align-center has-body-large-fluid-font-size wp-container-content-9cfa9a5a wp-block-paragraph\">Security signals processed daily&nbsp;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-uihobfsjr has-global-padding is-layout-constrained wp-container-core-group-is-layout-4db71cd5 wp-block-group-is-layout-constrained\" style=\"min-height:%\" data-microsoft-breakpoint-id=\"uihobfsjr\"><h3 class=\"wp-block-heading has-text-align-center has-light-blue-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-c46a9b955a6d2bbf4eac3a011e93b52b\">15,000+<\/h3>\n\n\n<p class=\"has-text-align-center has-body-large-fluid-font-size wp-container-content-9cfa9a5a wp-block-paragraph\">Partners in our security ecosystem, making it one of the largest in the world&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-uihobfsjr has-global-padding is-layout-constrained wp-container-core-group-is-layout-4db71cd5 wp-block-group-is-layout-constrained\" style=\"min-height:%\" data-microsoft-breakpoint-id=\"uihobfsjr\"><h3 class=\"wp-block-heading has-text-align-center has-light-blue-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-636cbc439f74fead9a778d8e40e1edac\">4.7 million<\/h3>\n\n\n<p class=\"has-text-align-center has-body-large-fluid-font-size wp-container-content-9cfa9a5a wp-block-paragraph\">Net new malware file blocks every day&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-uihobfsjr has-global-padding is-layout-constrained wp-container-core-group-is-layout-4db71cd5 wp-block-group-is-layout-constrained\" style=\"min-height:%\" data-microsoft-breakpoint-id=\"uihobfsjr\"><h3 class=\"wp-block-heading has-text-align-center has-light-blue-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-6c85771a43894c2f92a8707a1673993e\">35,000<\/h3>\n\n\n<p class=\"has-text-align-center has-body-large-fluid-font-size wp-container-content-9cfa9a5a wp-block-paragraph\">Full-time equivalent security engineers employed worldwide&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-uihobfsjr has-global-padding is-layout-constrained wp-container-core-group-is-layout-4db71cd5 wp-block-group-is-layout-constrained\" style=\"min-height:%\" data-microsoft-breakpoint-id=\"uihobfsjr\"><h3 class=\"wp-block-heading has-text-align-center has-light-blue-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-aa668ba40e9175f5db695f54fb21ed46\">31 million<\/h3>\n\n\n<p class=\"has-text-align-center has-body-large-fluid-font-size wp-container-content-9cfa9a5a wp-block-paragraph\">Identity risk detections analyzed in an average day&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-uihobfsjr has-global-padding is-layout-constrained wp-container-core-group-is-layout-4db71cd5 wp-block-group-is-layout-constrained\" style=\"min-height:%\" data-microsoft-breakpoint-id=\"uihobfsjr\"><h3 class=\"wp-block-heading has-text-align-center has-light-blue-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-23d1ee1f7283726f56f332f14c45cc46\">5.2 billion<\/h3>\n\n\n<p class=\"has-text-align-center has-body-large-fluid-font-size wp-container-content-9cfa9a5a wp-block-paragraph\">Emails screened daily on average to protect users from malware and phishing&#8203;<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-zb8e8el2r is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"zb8e8el2r\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-wp5s7n0pv is-layout-flow wp-container-core-group-is-layout-f16a04fa wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"wp5s7n0pv\"><h2 class=\"wp-block-heading has-text-align-left has-body-3-xl-fluid-font-size\">Top 10 takeaways from this report<\/h2>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group temp-accordions microsoft-breakpoint-id-ot2eugtge is-layout-grid wp-container-core-group-is-layout-0d07ba4a wp-block-group-is-layout-grid\" style=\"margin-top:var(--wp--preset--spacing--sm);padding-top:var(--wp--preset--spacing--md);padding-bottom:var(--wp--preset--spacing--md)\" data-microsoft-breakpoint-id=\"ot2eugtge\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-7drcb56zn has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-f3fb3137 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"7drcb56zn\"><details class=\"wp-block-details is-layout-flow wp-block-details-is-layout-flow\"><summary data-bi-an=\"Top recommendations from MDDR 2025\" data-bi-cn=\"Toggle\" data-bi-ct=\"button\" data-bi-ecn=\"Toggle\" data-bi-ehn=\"Invest in people, not just tools\" data-bi-hn=\"Invest in people, not just tools\">AI is changing the physics of cybersecurity<\/summary><p class=\"has-body-font-size wp-block-paragraph\">AI is compressing attack timelines, lowering the cost of sophisticated capabilities, and enabling attackers to operate with greater speed, scale, and autonomy. But the same capabilities can strengthen defense by accelerating discovery, analysis, prioritization, and response. Security organizations must prepare for an environment in which both attackers and defenders increasingly operate at machine speed.&#8203;<\/p>\n<\/details>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-f3fb3137 wp-block-group-is-layout-constrained\"><details class=\"wp-block-details wp-container-content-69bc4bdf is-layout-flow wp-block-details-is-layout-flow\"><summary data-bi-an=\"Top recommendations from MDDR 2025\" data-bi-cn=\"Toggle\" data-bi-ct=\"button_toggled\" data-bi-ecn=\"Toggle\" data-bi-ehn=\"Build in resilience\" data-bi-hn=\"Build in resilience\">Attackers are already targeting AI as another attack surface<\/summary><p class=\"has-body-font-size wp-block-paragraph\">Threat actors can exploit AI to do things like execute malicious commands, steal AI serving capacity, and exfiltrate data. As AI becomes ubiquitous in the workplace and at home, it has become both a tool and a target for attackers.&#8203;<\/p>\n<\/details>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-spsxhd9t3 wp-container-content-ab9b6df9 has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-f3fb3137 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"spsxhd9t3\"><details class=\"wp-block-details wp-container-content-69bc4bdf is-layout-flow wp-block-details-is-layout-flow\"><summary data-bi-an=\"Top recommendations from MDDR 2025\" data-bi-cn=\"Toggle\" data-bi-ct=\"button_toggled\" data-bi-ecn=\"Toggle\" data-bi-ehn=\"Understand risks and benefits of AI\" data-bi-hn=\"Understand risks and benefits of AI\">People remain a heavily exploited initial-access path<\/summary><p class=\"has-body-font-size wp-block-paragraph\">Threat actors continue to target user behavior through user execution, ClickFix-style social engineering, phishing, and impersonation. These techniques remain effective even as AI changes their speed, scale, and personalization.&#8203;<\/p>\n<\/details>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group wp-container-content-ab9b6df9 has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-f3fb3137 wp-block-group-is-layout-constrained\"><details class=\"wp-block-details wp-container-content-69bc4bdf is-layout-flow wp-block-details-is-layout-flow\"><summary data-bi-an=\"Top recommendations from MDDR 2025\" data-bi-cn=\"Toggle\" data-bi-ct=\"button_toggled\" data-bi-ecn=\"Toggle\" data-bi-ehn=\"Transition to quantum safety\" data-bi-hn=\"Transition to quantum safety\">Identity is the primary control plane for defense<\/summary><p class=\"has-body-font-size wp-block-paragraph\">Attackers consistently take advantage of unnecessary privileges, persistent access, and weak identity governance. This is why phishing-resistant multifactor authentication (MFA) and passkeys, disciplined identity hygiene, tiered administration, and strong privileged-access enforcement remain the best safeguards against cyber attacks. That control plane now spans both human and non-human identities, including applications and agents.&#8203;<\/p>\n<\/details>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group wp-container-content-ab9b6df9 has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-f3fb3137 wp-block-group-is-layout-constrained\"><details class=\"wp-block-details wp-container-content-69bc4bdf is-layout-flow wp-block-details-is-layout-flow\"><summary data-bi-an=\"Top recommendations from MDDR 2025\" data-bi-cn=\"Toggle\" data-bi-ct=\"button_toggled\" data-bi-ecn=\"Toggle\" data-bi-ehn=\"Defend your perimeter\" data-bi-hn=\"Defend your perimeter\">Signal correlation through shared threat intelligence is key to defense at multiple levels<\/summary><p class=\"has-body-font-size wp-block-paragraph\">The degree to which a defender&rsquo;s systems share and correlate threat intelligence is one of the highest-leverage strategic variables under the defender&rsquo;s control. Signal cross-correlation can reveal attack patterns that remain invisible when endpoint, identity, cloud, application, email, and network telemetry are analyzed in isolation.&#8203;<\/p>\n<\/details>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-5tvn8svzg wp-container-content-ab9b6df9 has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-f3fb3137 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"5tvn8svzg\"><details class=\"wp-block-details wp-container-content-69bc4bdf is-layout-flow wp-block-details-is-layout-flow\"><summary data-bi-an=\"Top recommendations from MDDR 2025\" data-bi-cn=\"Toggle\" data-bi-ct=\"button_toggled\" data-bi-ecn=\"Toggle\" data-bi-ehn=\"Collaborate across sectors\" data-bi-hn=\"Collaborate across sectors\">Emerging threats facilitate stealthier attacks, operating at a larger and faster scale<\/summary><p class=\"has-body-medium-fluid-font-size wp-block-paragraph\">Over the next year, Microsoft sees the most significant threats coming from:&#8203;<\/p>\n\n\n<ul class=\"wp-block-list\"><li class=\"wp-block-list-item\">Open-source supply chain compromise&#8203;<\/li>\n\n\n<li class=\"wp-block-list-item\">Attacks against edge devices&#8203;<\/li>\n\n\n<li class=\"wp-block-list-item\">AI as a force multiplier for malicious activity&#8203;<\/li>\n<\/ul>\n\n\n<p class=\"has-body-font-size wp-block-paragraph\">These threats are emerging as AI-generated synthetic content erodes confidence in digital communications. As authentic and synthetic content become harder to distinguish, individuals can become simultaneously more vulnerable to manipulation and less confident in legitimate sources. This shifts the security model from implicit trust toward explicit verification.&#8203;<\/p>\n<\/details>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-5tvn8svzg wp-container-content-ab9b6df9 has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-f3fb3137 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"5tvn8svzg\"><details class=\"wp-block-details wp-container-content-69bc4bdf is-layout-flow wp-block-details-is-layout-flow\"><summary data-bi-an=\"Top recommendations from MDDR 2025\" data-bi-cn=\"Toggle\" data-bi-ct=\"button_toggled\" data-bi-ecn=\"Toggle\" data-bi-ehn=\"Collaborate across sectors\" data-bi-hn=\"Collaborate across sectors\">Protecting data is even more important as AI expands access at scale<\/summary><p class=\"has-body-font-size wp-block-paragraph\">Trusted AI depends on trusted, well-governed data. Data protection has always been a key priority, and now that AI systems and agents can reach and act on sensitive information at unprecedented scale, it&rsquo;s more crucial than ever. Organizations should reduce oversharing, apply sensitivity-aware access and least-privilege controls, and govern how data is discovered, used, and shared across AI, cloud, and application environments.&#8203;<\/p>\n<\/details>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-5tvn8svzg wp-container-content-ab9b6df9 has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-f3fb3137 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"5tvn8svzg\"><details class=\"wp-block-details wp-container-content-69bc4bdf is-layout-flow wp-block-details-is-layout-flow\"><summary data-bi-an=\"Top recommendations from MDDR 2025\" data-bi-cn=\"Toggle\" data-bi-ct=\"button_toggled\" data-bi-ecn=\"Toggle\" data-bi-ehn=\"Collaborate across sectors\" data-bi-hn=\"Collaborate across sectors\">The future of defense involves rethinking how we protect our assets from reactive incident response to proactive, continuous discipline<\/summary><p class=\"has-body-font-size wp-block-paragraph\">Defenders must shift from tool-centric vulnerability management to threat exposure management. At the core of this is:&#8203;<\/p>\n\n\n<ul class=\"wp-block-list\"><li class=\"wp-block-list-item\">Asset visibility&#8203;<\/li>\n\n\n<li class=\"wp-block-list-item\">Continuous vulnerability awareness&#8203;<\/li>\n\n\n<li class=\"wp-block-list-item\">Intelligence-driven threat detection&#8203;<\/li>\n\n\n<li class=\"wp-block-list-item\">AI-accelerated insight&#8203;<\/li>\n<\/ul>\n\n\n<p class=\"has-body-font-size wp-block-paragraph\">This means reporting metrics should shift from number of patches deployed to exposure reduced, detection coverage increased, and time-to-mitigate compressed.&#8203;<\/p>\n<\/details>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-5tvn8svzg wp-container-content-ab9b6df9 has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-f3fb3137 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"5tvn8svzg\"><details class=\"wp-block-details wp-container-content-69bc4bdf is-layout-flow wp-block-details-is-layout-flow\"><summary data-bi-an=\"Top recommendations from MDDR 2025\" data-bi-cn=\"Toggle\" data-bi-ct=\"button_toggled\" data-bi-ecn=\"Toggle\" data-bi-ehn=\"Collaborate across sectors\" data-bi-hn=\"Collaborate across sectors\">National and international policy decisions will shape the future of cybersecurity<\/summary><p class=\"has-body-font-size wp-block-paragraph\">In an increasingly contested landscape, cybersecurity demands clearer rules, credible accountability, and sustained cooperation. Strengthening protections for critical infrastructure, advancing operational accountability, and preserving an open, secure, and resilient digital environment must be a priority for governments on both a domestic and international level.&#8203;<\/p>\n<\/details>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-5tvn8svzg wp-container-content-ab9b6df9 has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-f3fb3137 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"5tvn8svzg\"><details class=\"wp-block-details wp-container-content-69bc4bdf is-layout-flow wp-block-details-is-layout-flow\"><summary data-bi-an=\"Top recommendations from MDDR 2025\" data-bi-cn=\"Toggle\" data-bi-ct=\"button_toggled\" data-bi-ecn=\"Toggle\" data-bi-ehn=\"Collaborate across sectors\" data-bi-hn=\"Collaborate across sectors\">Resilience must be a core outcome of cybersecurity planning<\/summary><p class=\"has-body-font-size wp-block-paragraph\">Retain the existing focus on reducing exposure, detecting threats faster, adapting to changing risks, and maintaining operations. This preserves resilience as the outcome without competing with identity, secure foundations, data, and the three-part operating model for &lsquo;primary&rsquo; status.&#8203;<\/p>\n<\/details>\n<\/div>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-ir3qxmzvx is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"ir3qxmzvx\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-ght0p2chs is-layout-flow wp-container-core-group-is-layout-f16a04fa wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"ght0p2chs\"><h2 class=\"wp-block-heading has-text-align-center has-body-3-xl-fluid-font-size\" style=\"padding-top:0;padding-bottom:0\">Key figures from the report<\/h2>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-dny8gj7su is-layout-grid wp-container-core-group-is-layout-38047f66 wp-block-group-is-layout-grid\" style=\"padding-top:var(--wp--preset--spacing--sm);padding-bottom:var(--wp--preset--spacing--sm)\" data-microsoft-breakpoint-id=\"dny8gj7su\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-uihobfsjr has-global-padding is-layout-constrained wp-container-core-group-is-layout-4db71cd5 wp-block-group-is-layout-constrained\" style=\"min-height:%\" data-microsoft-breakpoint-id=\"uihobfsjr\"><h3 class=\"wp-block-heading has-text-align-center has-light-blue-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-f290326fc19b82b959ad5f3ef4a6f903\">63%<\/h3>\n\n\n<p class=\"has-text-align-center has-body-large-fluid-font-size wp-container-content-9cfa9a5a wp-block-paragraph\">Of intrusions involved data theft&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-uihobfsjr has-global-padding is-layout-constrained wp-container-core-group-is-layout-4db71cd5 wp-block-group-is-layout-constrained\" style=\"min-height:%\" data-microsoft-breakpoint-id=\"uihobfsjr\"><h3 class=\"wp-block-heading has-text-align-center has-light-blue-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-a90b3147d980c69a34dc79c6b429ad1c\">5.3 hours&#8203;<\/h3>\n\n\n<p class=\"has-text-align-center has-body-large-fluid-font-size wp-container-content-9cfa9a5a wp-block-paragraph\">Average time before exposed cloud workloads were attacked&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-uihobfsjr has-global-padding is-layout-constrained wp-container-core-group-is-layout-4db71cd5 wp-block-group-is-layout-constrained\" style=\"min-height:%\" data-microsoft-breakpoint-id=\"uihobfsjr\"><h3 class=\"wp-block-heading has-text-align-center has-light-blue-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-6b7421dbd49c033f5e1abb159482044d\">93%<\/h3>\n\n\n<p class=\"has-text-align-center has-body-large-fluid-font-size wp-container-content-9cfa9a5a wp-block-paragraph\">Of voice phishing attacks kept the victim on the line long enough to begin social engineering&#8203;<\/p>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-ddjlal6qe has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"ddjlal6qe\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-dny8gj7su is-layout-grid wp-container-core-group-is-layout-38047f66 wp-block-group-is-layout-grid\" style=\"padding-top:var(--wp--preset--spacing--sm);padding-bottom:var(--wp--preset--spacing--sm)\" data-microsoft-breakpoint-id=\"dny8gj7su\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-uihobfsjr has-global-padding is-layout-constrained wp-container-core-group-is-layout-4db71cd5 wp-block-group-is-layout-constrained\" style=\"min-height:%\" data-microsoft-breakpoint-id=\"uihobfsjr\"><h3 class=\"wp-block-heading has-text-align-center has-light-blue-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-4bd36a8685d17f0c45f91202367c628e\">46 million+&#8203;<\/h3>\n\n\n<p class=\"has-text-align-center has-body-large-fluid-font-size wp-container-content-9cfa9a5a wp-block-paragraph\">Business email impersonation attacks detected over the past 12 months<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-uihobfsjr has-global-padding is-layout-constrained wp-container-core-group-is-layout-4db71cd5 wp-block-group-is-layout-constrained\" style=\"min-height:%\" data-microsoft-breakpoint-id=\"uihobfsjr\"><h3 class=\"wp-block-heading has-text-align-center has-light-blue-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-49039da6a37cefa4316f41f8a90d3f10\">89-95%&#8203;<\/h3>\n\n\n<p class=\"has-text-align-center has-body-large-fluid-font-size wp-container-content-9cfa9a5a wp-block-paragraph\">Of email phishing attachments led to a credential theft effort&#8203;<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-xo1to4845 is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"xo1to4845\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-jyh6t7lda is-layout-grid wp-container-core-group-is-layout-9a7b99df wp-block-group-is-layout-grid\" style=\"border-top-color:var(--wp--preset--color--warm-ivory);border-top-width:2px;padding-top:var(--wp--preset--spacing--lg)\" data-microsoft-breakpoint-id=\"jyh6t7lda\"><h2 class=\"wp-block-heading has-body-2-xl-plus-fluid-font-size\">Cyber threats: Worldwide customer impact in 2026 &#8203;<\/h2>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"margin-right:var(--wp--preset--spacing--3-xl-fluid);padding-top:var(--wp--preset--spacing--xs);padding-right:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs)\">Countries where customers are most frequently impacted by cyber threats.&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-q7851yrhg has-global-padding is-layout-constrained wp-container-core-group-is-layout-c559c14a wp-block-group-is-layout-constrained\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs)\" data-microsoft-breakpoint-id=\"q7851yrhg\"><style class=\"is-layout-flow wp-block-microsoft-embed-embed-is-layout-flow\">\n\n#microsoft-embed-4 {\n\t--width-desktop: 100%;\n\t--height-desktop: 400px;\n\t--width-tablet: 100%;\n\t--height-tablet: 400px;\n\t--width-mobile: 100%;\n\t--height-mobile: 400px;\n}\n#microsoft-embed-4 { --aspect-ratio-desktop: 16\/9; }\n#microsoft-embed-4 { --aspect-ratio-tablet: 4\/3; }\n#microsoft-embed-4 { --aspect-ratio-mobile: 3\/5; }<\/style><div class=\"microsoft-embed-block temp-embed-map-fix wp-block-microsoft-embed-embed\" id=\"microsoft-embed-4\" data-auto-resize-height=\"false\" data-controls=\"\">\n\t<iframe src=\"https:\/\/kind-desert-09ec5a40f-preview.eastus2.1.azurestaticapps.net\/\" frameborder=\"0\" allowfullscreen loading=\"eager\" fetchpriority=\"high\" title=\"Threat map\"><\/iframe>\n\n\t\n\t\t<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group has-light-teal-color has-text-color has-link-color microsoft-breakpoint-id-rkipfnjlt wp-elements-8f3690fe7ddb5f8cd15d66d7a440b500 has-global-padding is-content-justification-left is-layout-constrained wp-container-core-group-is-layout-0b051b69 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"rkipfnjlt\"><p class=\"wp-block-paragraph\"><strong>Source:<\/strong> Microsoft Threat Intelligence<\/p>\n\n\n<p class=\"wp-block-paragraph\">This map pulls from data from July 1, 2025 &ndash; June 30, 2026 on how frequently customers are targeted by malicious activity in each country. The most impacted countries are compared to other countries in their region, both as a percentage of regional activity and a rank of regional activity. &#8203;<\/p>\n<\/div>\n<\/div>\n<\/section>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull has-brown-black-color has-mint-sky-fade-gradient-background has-text-color has-background has-link-color microsoft-breakpoint-id-psurt96dd wp-elements-c020cc5a0c1f832ff25862d2a309158f has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" id=\"section-ai\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"psurt96dd\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-p2w8e5qob layout-sidebar-layout is-layout-grid wp-container-core-group-is-layout-64935f53 wp-block-group-is-layout-grid\" data-microsoft-breakpoint-id=\"p2w8e5qob\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-6aukwwgm5 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow block-visibility-hide-small-screen\" data-microsoft-breakpoint-id=\"6aukwwgm5\"><div data-bi-ct=\"group\" class=\"wp-block-group alignfull microsoft-breakpoint-id-ndufgzv2a is-layout-flow wp-block-group-is-layout-flow wp-container-5 is-position-sticky\" data-microsoft-breakpoint-id=\"ndufgzv2a\" data-sticky-until=\"#section-resilience\"><div class=\"table-of-contents alignfull wp-block-microsoft-table-of-contents-table-of-contents\" data-wp-interactive=\"microsoft-table-of-contents\">\n\t\n<div class=\"toc-item toc-item--level-0 is-style-headline wp-block-microsoft-table-of-contents-toc-item\" data-wp-on--mouseenter=\"actions.activateItem\" data-wp-on--mouseleave=\"actions.deactivateItem\" data-wp-on--focusin=\"actions.activateItem\" data-wp-on--focusout=\"actions.deactivateItem\" data-wp-context='{\"itemId\":\"toc-item-6ac14df73010c\"}' data-wp-class--is-active=\"state.isActive\">\n\t<div class=\"toc-item__header\">\n\t\t\t\t\t<a href=\"#defense-report\" class=\"toc-item__label\n\t\t\t\t\" data-bi-cn=\"Microsoft Digital Defense Report\" data-bi-ct=\"railmenu\">\n\t\t\t\tMicrosoft Digital Defense Report\t\t\t<\/a>\n\t\t\t<\/div>\n\n\t\t\t<div class=\"toc-item__content\">\n\t\t\t\n<div class=\"toc-item toc-item--level-0 wp-block-microsoft-table-of-contents-toc-item\" data-wp-on--mouseenter=\"actions.activateItem\" data-wp-on--mouseleave=\"actions.deactivateItem\" data-wp-on--focusin=\"actions.activateItem\" data-wp-on--focusout=\"actions.deactivateItem\" data-wp-context='{\"itemId\":\"toc-item-6ac14df72fc29\"}' data-wp-class--is-active=\"state.isActive\">\n\t<div class=\"toc-item__header\">\n\t\t\t\t\t<a href=\"#section-ai\" class=\"toc-item__label\n\t\t\t\t\" data-bi-cn=\"AI\" data-bi-ct=\"railmenu\">\n\t\t\t\tAI\t\t\t<\/a>\n\t\t\t<\/div>\n\n\t<\/div>\n\n\n<div class=\"toc-item toc-item--level-0 wp-block-microsoft-table-of-contents-toc-item\" data-wp-on--mouseenter=\"actions.activateItem\" data-wp-on--mouseleave=\"actions.deactivateItem\" data-wp-on--focusin=\"actions.activateItem\" data-wp-on--focusout=\"actions.deactivateItem\" data-wp-context='{\"itemId\":\"toc-item-6ac14df72fe2c\"}' data-wp-class--is-active=\"state.isActive\">\n\t<div class=\"toc-item__header\">\n\t\t\t\t\t<a href=\"#section-threat-landscape\" class=\"toc-item__label\n\t\t\t\t\" data-bi-cn=\"The threat landscape\" data-bi-ct=\"railmenu\">\n\t\t\t\tThe threat landscape\t\t\t<\/a>\n\t\t\t<\/div>\n\n\t\t\t<div class=\"toc-item__content\">\n\t\t\t\n\n\t\t<\/div>\n\t<\/div>\n\n\n<div class=\"toc-item toc-item--level-0 wp-block-microsoft-table-of-contents-toc-item\" data-wp-on--mouseenter=\"actions.activateItem\" data-wp-on--mouseleave=\"actions.deactivateItem\" data-wp-on--focusin=\"actions.activateItem\" data-wp-on--focusout=\"actions.deactivateItem\" data-wp-context='{\"itemId\":\"toc-item-6ac14df72ff4d\"}' data-wp-class--is-active=\"state.isActive\">\n\t<div class=\"toc-item__header\">\n\t\t\t\t\t<a href=\"#section-cybercrime\" class=\"toc-item__label\n\t\t\t\t\" data-bi-cn=\"Cybercrime\" data-bi-ct=\"railmenu\">\n\t\t\t\tCybercrime\t\t\t<\/a>\n\t\t\t<\/div>\n\n\t<\/div>\n\n\n<div class=\"toc-item toc-item--level-0 wp-block-microsoft-table-of-contents-toc-item\" data-wp-on--mouseenter=\"actions.activateItem\" data-wp-on--mouseleave=\"actions.deactivateItem\" data-wp-on--focusin=\"actions.activateItem\" data-wp-on--focusout=\"actions.deactivateItem\" data-wp-context='{\"itemId\":\"toc-item-6ac14df730049\"}' data-wp-class--is-active=\"state.isActive\">\n\t<div class=\"toc-item__header\">\n\t\t\t\t\t<a href=\"#section-resilience\" class=\"toc-item__label\n\t\t\t\t\" data-bi-cn=\"Resilience\" data-bi-ct=\"railmenu\">\n\t\t\t\tResilience\t\t\t<\/a>\n\t\t\t<\/div>\n\n\t<\/div>\n\n\t\t<\/div>\n\t<\/div>\n\n\n<div class=\"toc-item toc-item--level-0 wp-block-microsoft-table-of-contents-toc-item\" data-wp-on--mouseenter=\"actions.activateItem\" data-wp-on--mouseleave=\"actions.deactivateItem\" data-wp-on--focusin=\"actions.activateItem\" data-wp-on--focusout=\"actions.deactivateItem\" data-wp-context='{\"itemId\":\"toc-item-6ac14df7304bf\"}' data-wp-class--is-active=\"state.isActive\">\n\t<div class=\"toc-item__header\">\n\t\t\t\t\t<a href=\"#additional-reports\" class=\"toc-item__label\n\t\t\t\t\" data-bi-cn=\"Additional report topics\" data-bi-ct=\"railmenu\">\n\t\t\t\tAdditional report topics\t\t\t<\/a>\n\t\t\t<\/div>\n\n\t<\/div>\n\n\n<div class=\"toc-item toc-item--level-0 has-icon wp-block-microsoft-table-of-contents-toc-item\" data-wp-on--mouseenter=\"actions.activateItem\" data-wp-on--mouseleave=\"actions.deactivateItem\" data-wp-on--focusin=\"actions.activateItem\" data-wp-on--focusout=\"actions.deactivateItem\" data-wp-context='{\"itemId\":\"toc-item-6ac14df7305c5\"}' data-wp-class--is-active=\"state.isActive\">\n\t<div class=\"toc-item__header\">\n\t\t\t\t\t<a href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026\" class=\"toc-item__label\n\t\t\t\t\t\t\t\t\thas-icon\" target=\"_blank\" rel=\"noopener noreferrer\" data-bi-cn=\"Read the full report\" data-bi-ct=\"railmenu\">\n\t\t\t\tRead the full report\t\t\t<\/a>\n\t\t\t<\/div>\n\n\t<\/div>\n\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-f4ydt2jzg is-nowrap is-layout-flex wp-container-core-group-is-layout-a3dcfe8c wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"f4ydt2jzg\"><ul class=\"wp-block-social-links has-small-icon-size has-icon-color has-icon-background-color is-layout-flex wp-container-core-social-links-is-layout-b05b44e1 wp-block-social-links-is-layout-flex\"><li style=\"color:#fff;background-color:#000\" class=\"wp-social-link wp-social-link-linkedin has-white-color has-black-background-color wp-block-social-link\"><a data-bi-an=\"social media\" data-bi-ct=\"socialshare\" data-bi-ecn=\"Follow LinkedIn\" data-bi-ehn=\"Rail Menu\" data-bi-hn=\"Rail Menu\" data-bi-socchn=\"LinkedIn\" rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/www.linkedin.com\/showcase\/microsoft-on-the-issues\" class=\"wp-block-social-link-anchor\" data-bi-cn=\"Follow LinkedIn\"><svg width=\"24\" height=\"24\" viewbox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M19.7,3H4.3C3.582,3,3,3.582,3,4.3v15.4C3,20.418,3.582,21,4.3,21h15.4c0.718,0,1.3-0.582,1.3-1.3V4.3 C21,3.582,20.418,3,19.7,3z M8.339,18.338H5.667v-8.59h2.672V18.338z M7.004,8.574c-0.857,0-1.549-0.694-1.549-1.548 c0-0.855,0.691-1.548,1.549-1.548c0.854,0,1.547,0.694,1.547,1.548C8.551,7.881,7.858,8.574,7.004,8.574z M18.339,18.338h-2.669 v-4.177c0-0.996-0.017-2.278-1.387-2.278c-1.389,0-1.601,1.086-1.601,2.206v4.249h-2.667v-8.59h2.559v1.174h0.037 c0.356-0.675,1.227-1.387,2.526-1.387c2.703,0,3.203,1.779,3.203,4.092V18.338z\"><\/path><\/svg><span class=\"wp-block-social-link-label screen-reader-text\">LinkedIn<\/span><\/a><\/li>\n\n\n<li style=\"color:#fff;background-color:#000\" class=\"wp-social-link wp-social-link-instagram has-white-color has-black-background-color wp-block-social-link\"><a data-bi-an=\"social media\" data-bi-ct=\"socialshare\" data-bi-ecn=\"Follow Instagram\" data-bi-ehn=\"Rail Menu\" data-bi-hn=\"Rail Menu\" data-bi-socchn=\"Instagram\" rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/www.instagram.com\/msftissues\/\" class=\"wp-block-social-link-anchor\" data-bi-cn=\"Follow Instagram\"><svg width=\"24\" height=\"24\" viewbox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M12,4.622c2.403,0,2.688,0.009,3.637,0.052c0.877,0.04,1.354,0.187,1.671,0.31c0.42,0.163,0.72,0.358,1.035,0.673 c0.315,0.315,0.51,0.615,0.673,1.035c0.123,0.317,0.27,0.794,0.31,1.671c0.043,0.949,0.052,1.234,0.052,3.637 s-0.009,2.688-0.052,3.637c-0.04,0.877-0.187,1.354-0.31,1.671c-0.163,0.42-0.358,0.72-0.673,1.035 c-0.315,0.315-0.615,0.51-1.035,0.673c-0.317,0.123-0.794,0.27-1.671,0.31c-0.949,0.043-1.233,0.052-3.637,0.052 s-2.688-0.009-3.637-0.052c-0.877-0.04-1.354-0.187-1.671-0.31c-0.42-0.163-0.72-0.358-1.035-0.673 c-0.315-0.315-0.51-0.615-0.673-1.035c-0.123-0.317-0.27-0.794-0.31-1.671C4.631,14.688,4.622,14.403,4.622,12 s0.009-2.688,0.052-3.637c0.04-0.877,0.187-1.354,0.31-1.671c0.163-0.42,0.358-0.72,0.673-1.035 c0.315-0.315,0.615-0.51,1.035-0.673c0.317-0.123,0.794-0.27,1.671-0.31C9.312,4.631,9.597,4.622,12,4.622 M12,3 C9.556,3,9.249,3.01,8.289,3.054C7.331,3.098,6.677,3.25,6.105,3.472C5.513,3.702,5.011,4.01,4.511,4.511 c-0.5,0.5-0.808,1.002-1.038,1.594C3.25,6.677,3.098,7.331,3.054,8.289C3.01,9.249,3,9.556,3,12c0,2.444,0.01,2.751,0.054,3.711 c0.044,0.958,0.196,1.612,0.418,2.185c0.23,0.592,0.538,1.094,1.038,1.594c0.5,0.5,1.002,0.808,1.594,1.038 c0.572,0.222,1.227,0.375,2.185,0.418C9.249,20.99,9.556,21,12,21s2.751-0.01,3.711-0.054c0.958-0.044,1.612-0.196,2.185-0.418 c0.592-0.23,1.094-0.538,1.594-1.038c0.5-0.5,0.808-1.002,1.038-1.594c0.222-0.572,0.375-1.227,0.418-2.185 C20.99,14.751,21,14.444,21,12s-0.01-2.751-0.054-3.711c-0.044-0.958-0.196-1.612-0.418-2.185c-0.23-0.592-0.538-1.094-1.038-1.594 c-0.5-0.5-1.002-0.808-1.594-1.038c-0.572-0.222-1.227-0.375-2.185-0.418C14.751,3.01,14.444,3,12,3L12,3z M12,7.378 c-2.552,0-4.622,2.069-4.622,4.622S9.448,16.622,12,16.622s4.622-2.069,4.622-4.622S14.552,7.378,12,7.378z M12,15 c-1.657,0-3-1.343-3-3s1.343-3,3-3s3,1.343,3,3S13.657,15,12,15z M16.804,6.116c-0.596,0-1.08,0.484-1.08,1.08 s0.484,1.08,1.08,1.08c0.596,0,1.08-0.484,1.08-1.08S17.401,6.116,16.804,6.116z\"><\/path><\/svg><span class=\"wp-block-social-link-label screen-reader-text\">Instagram<\/span><\/a><\/li>\n\n\n<li style=\"color:#fff;background-color:#000\" class=\"wp-social-link wp-social-link-x has-white-color has-black-background-color wp-block-social-link\"><a data-bi-an=\"social media\" data-bi-ct=\"socialshare\" data-bi-ecn=\"Follow X\" data-bi-ehn=\"Rail Menu\" data-bi-hn=\"Rail Menu\" data-bi-socchn=\"X\" rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/msftissues\" class=\"wp-block-social-link-anchor\" data-bi-cn=\"Follow X\"><svg width=\"24\" height=\"24\" viewbox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M13.982 10.622 20.54 3h-1.554l-5.693 6.618L8.745 3H3.5l6.876 10.007L3.5 21h1.554l6.012-6.989L15.868 21h5.245l-7.131-10.378Zm-2.128 2.474-.697-.997-5.543-7.93H8l4.474 6.4.697.996 5.815 8.318h-2.387l-4.745-6.787Z\"><\/path><\/svg><span class=\"wp-block-social-link-label screen-reader-text\">X<\/span><\/a><\/li>\n<\/ul>\n\n\n<figure class=\"wp-block-image size-full is-resized\" style=\"margin-top:7px\"><a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/\" target=\"_blank\" rel=\" Microsoft on the issues blog\" data-bi-cn=\"Microsoft On The Issues Blog\"><img decoding=\"async\" src=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/\/wp-content\/themes\/microsoft-cela\/dist\/images\/icon-edit.png\" alt=\"Microsoft On The Issues Blog\" class=\"wp-image-442\" style=\"object-fit:contain;width:23px;height:22px\"><\/a><\/figure>\n<\/div>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-8yjhbdka4 wp-container-content-9cfa9a5a has-global-padding is-layout-constrained wp-container-core-group-is-layout-0ed47fa0 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"8yjhbdka4\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-qv2xalryd has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"qv2xalryd\"><div data-bi-ct=\"group\" class=\"wp-block-group has-body-sm-font-size microsoft-breakpoint-id-mu39h65a4 is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-47bd5148 wp-block-group-is-layout-flex\" style=\"font-style:normal;font-weight:600;letter-spacing:0.15em;line-height:1;text-transform:uppercase\" data-microsoft-breakpoint-id=\"mu39h65a4\"><p class=\"has-clear-teal-background-color has-background wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-right:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs);padding-left:var(--wp--preset--spacing--xs)\">MDDR 2026 Report<\/p>\n\n\n<p class=\"has-light-teal-background-color has-background wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-right:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs);padding-left:var(--wp--preset--spacing--xs)\">AI<\/p>\n<\/div>\n\n\n<h2 class=\"wp-block-heading has-body-4-xl-fluid-font-size\">AI<\/h2>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">As AI becomes foundational to economies, governments, and critical services, organizations must secure the AI ecosystem through governance, accountability, lifecycle-based security, and resilient architecture.&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-exr1n5siy is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--lg)\" data-microsoft-breakpoint-id=\"exr1n5siy\"><h3 class=\"wp-block-heading has-segoe-sans-font-family has-body-2-xl-plus-fluid-font-size\">The AI threat landscape&#8203;<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">The expanded threat landscape includes both AI systems as targets and AI-enabled attacks on traditional systems. Attackers may target AI-specific components&mdash;including inputs, model data and weights, serving infrastructure, user data, and generated outputs&mdash;to manipulate, steal from, or disrupt AI systems. At the same time, AI can increase the speed, scale, and sophistication of attacks against more traditional targets, including computer systems, people, sensitive information, and physical capabilities.&#8203;<\/p>\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"596\" src=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Fig1_Target_Landscape-e1790872909638-1024x596.png\" alt=\"Diagram showing the AI threat landscape, with AI systems, agents, and chatbots at the center, receiving inputs from data, model data, product infrastructure, and output artifacts on the left, and enabling attacks on computer systems, people, information, and physical capabilities on the right.&#8203;\" class=\"wp-image-4795\" srcset=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Fig1_Target_Landscape-e1790872909638-1024x596.png 1024w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Fig1_Target_Landscape-e1790872909638-300x174.png 300w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Fig1_Target_Landscape-e1790872909638-768x447.png 768w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Fig1_Target_Landscape-e1790872909638-1536x893.png 1536w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Fig1_Target_Landscape-e1790872909638.png 1587w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\"><\/figure>\n\n\n<p class=\"wp-block-paragraph\">Source: This figure maps the expanded target landscape, which roughly divides into targets associated with AI systems and targets of threat actors that use AI for enablement.<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-rr9upg19f is-layout-grid wp-container-core-group-is-layout-aa30ef58 wp-block-group-is-layout-grid\" data-microsoft-breakpoint-id=\"rr9upg19f\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-j2cmov6d1 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"j2cmov6d1\"><h3 class=\"wp-block-heading has-deep-dark-teal-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-fe363d467eb0bd1c187bdd9405c21339\">88%<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\">88% of enterprises are already experimenting with AI agents, with 82% of leaders planning broader rollouts within 12 to 18 months.&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-0v9w74on6 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"0v9w74on6\"><h3 class=\"wp-block-heading has-deep-dark-teal-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-c6aba8765cca596b3cf70aad6bf20a20\">1.3 billion<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\">Industry projections point to roughly 1.3 billion AI agents in production by 2028.&#8203;<\/p>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-qddc8iplm is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--lg)\" data-microsoft-breakpoint-id=\"qddc8iplm\"><h3 class=\"wp-block-heading has-segoe-sans-font-family has-body-2-xl-plus-fluid-font-size\">Malicious AI assistant extensions harvesting LLM data<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">In December 2025, Microsoft found a malicious browser extension (600,000+ installs) harvesting ChatGPT and DeepSeek conversation history. This activity affected almost 10,000 organizations before it was mitigated. LLM conversation history now routinely holds source code, architecture, customer data, and leaked credentials.&#8203;<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-secondary-alt\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=16\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Read case study\">Read case study <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-tli12qy3v wp-container-content-9cfa9a5a has-global-padding is-layout-constrained wp-container-core-group-is-layout-0ed47fa0 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"tli12qy3v\"><div data-bi-ct=\"group\" class=\"wp-block-group has-body-large-fluid-font-size microsoft-breakpoint-id-aiek4s3l0 has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"aiek4s3l0\"><h3 class=\"wp-block-heading has-segoe-sans-font-family has-body-2-xl-fluid-font-size\">The five risk classes defining the 2026 agentic attack surface&#8203;<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">The chart identifies five key attack surfaces that could be used to exploit AI agents, pairing common tactics with the defensive controls needed to address each risk. Together, they show that securing agentic AI requires protections not only around the model itself but also around the identities, data, tools, and systems that agents can access and act on.&#8203;<\/p>\n\n\n<figure class=\"wp-block-table\"><table class=\"has-light-blue-background-color has-background has-fixed-layout\"><thead><tr><th>Risk area<\/th><th>What attackers do<\/th><th>What defenders need<\/th><\/tr><\/thead><tbody><tr><td><strong>Prompt and intent manipulation<\/strong><\/td><td>Inject instructions through<br>prompts, content, files,<br>or memory to redirect<br>the agent<\/td><td>Prompt injection detection,<br>payload inspection, intent<br>validation, output review<\/td><\/tr><tr><td><strong>Sensitive data exposure<\/strong><\/td><td>Drive the agent to read or<br>return content beyond its<br>sanctioned scope<\/td><td>Sensitivity-aware retrieval,<br>response inspection, data<br>loss prevention (DLP)<br>on inputs and outputs,<br>memory scoping<\/td><\/tr><tr><td><strong>Identity and privilege compromise<\/strong><\/td><td>Impersonate a sub-agent,<br>reuse stolen credentials,<br>or chain privileges<br>across agents<\/td><td>Verifiable agent identity,<br>mutual authentication,<br>scoped credentials,<br>least privilege<\/td><\/tr><tr><td><strong>Excessive agency<\/strong><\/td><td>Coax the agent<br>into chaining tools<br>or actions beyond<br>sanctioned behavior<\/td><td>Tool allow-listing, runtime<br>gating, action policy,<br>anomaly detection<\/td><\/tr><tr><td><strong>Operational integrity<\/strong><\/td><td>Tamper with configuration,<br>system prompts, memory,<br>training data, supply chain,<br>or logs<\/td><td>Immutable logs, signed<br>configuration, change<br>governance, supply<br>chain attestation<\/td><\/tr><\/tbody><\/table><\/figure>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group has-light-teal-background-color has-background microsoft-breakpoint-id-tb3dbob1n is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--lg);cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=21\" data-clickable-context=\"custom\" data-clickable-selector=\"\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"tb3dbob1n\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-4de5ps831 is-nowrap is-layout-flex wp-container-core-group-is-layout-7387b849 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"4de5ps831\"><h3 class=\"wp-block-heading has-body-2-xl-fluid-font-size\">Govern agent identity before agents outnumber people&#8203;<\/h3>\n<\/div>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">AI is expanding what attackers can do and what defenders must protect at the same time. Policymakers should treat AI systems as infrastructure that requires security across the full lifecycle, enabling governments and organizations to adopt AI confidently while maintaining control over sensitive systems and data.&#8203;<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-secondary-alt\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link has-body-font-size has-custom-font-size wp-element-button has-inline-icon\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=21\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Read more\">Read more<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull has-brown-black-color has-sky-to-mint-gradient-background has-text-color has-background has-link-color microsoft-breakpoint-id-psurt96dd wp-elements-55ae11180f6b45fb79d161d6b5822a6f has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" id=\"section-threat-landscape\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"psurt96dd\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-mu39h65a4 layout-sidebar-layout is-layout-grid wp-container-core-group-is-layout-9070ac1f wp-block-group-is-layout-grid\" data-microsoft-breakpoint-id=\"mu39h65a4\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-6aukwwgm5 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"6aukwwgm5\"><\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-y8v7w81zl has-global-padding is-layout-constrained wp-container-core-group-is-layout-0ed47fa0 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"y8v7w81zl\"><div data-bi-ct=\"group\" class=\"wp-block-group has-body-sm-font-size microsoft-breakpoint-id-mu39h65a4 is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-47bd5148 wp-block-group-is-layout-flex\" style=\"font-style:normal;font-weight:600;letter-spacing:0.15em;line-height:1;text-transform:uppercase\" data-microsoft-breakpoint-id=\"mu39h65a4\"><p class=\"has-clear-blue-background-color has-background wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-right:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs);padding-left:var(--wp--preset--spacing--xs)\">MDDR 2026 Report<\/p>\n\n\n<p class=\"has-light-blue-background-color has-background wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-right:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs);padding-left:var(--wp--preset--spacing--xs)\">ThE THreat landscape<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-6aukwwgm5 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"6aukwwgm5\"><h2 class=\"wp-block-heading has-body-4-xl-fluid-font-size\">The threat landscape<\/h2>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">Most intrusions still start with a person or a credential rather than an exploit. Attackers are increasingly relying on human behavior and identity-based access, making intrusions harder to detect. This underscores the importance of foundational security and defense at machine speed.&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-exr1n5siy is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--lg)\" data-microsoft-breakpoint-id=\"exr1n5siy\"><h3 class=\"wp-block-heading has-segoe-sans-font-family has-body-2-xl-plus-fluid-font-size\">Human action and trusted access still account for the majority of observed initial access&#8203;<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">People and identities are primary entry points for attackers, reinforcing the need for layered identity, endpoint, and browser protections. Below are the most common initial access techniques identified in the 2026 report by share of observed activity.&#8203;<\/p>\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1138\" height=\"1580\" src=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Initial-access-vectors-across-two-years-of-incident-response-IR-findings-e1790313669714.png\" alt=\"Grouped bar chart comparing ten initial access techniques in 2025 and 2026 by share of observed activity. User execution and valid accounts remain the most common techniques overall.&#8203;\" class=\"wp-image-4732\" style=\"aspect-ratio:0.7202546148949713;width:636px;height:auto\" srcset=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Initial-access-vectors-across-two-years-of-incident-response-IR-findings-e1790313669714.png 1138w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Initial-access-vectors-across-two-years-of-incident-response-IR-findings-e1790313669714-216x300.png 216w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Initial-access-vectors-across-two-years-of-incident-response-IR-findings-e1790313669714-738x1024.png 738w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Initial-access-vectors-across-two-years-of-incident-response-IR-findings-e1790313669714-768x1066.png 768w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Initial-access-vectors-across-two-years-of-incident-response-IR-findings-e1790313669714-1106x1536.png 1106w\" sizes=\"auto, (max-width: 1138px) 100vw, 1138px\"><\/figure>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-odvg8bkj5 is-layout-grid wp-container-core-group-is-layout-a00448d6 wp-block-group-is-layout-grid\" data-microsoft-breakpoint-id=\"odvg8bkj5\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-j2cmov6d1 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"j2cmov6d1\"><h3 class=\"wp-block-heading has-deep-dark-teal-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-9415ab3a08133ac7baee231a00b6c7f8\">52.2%<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\">Of valid account intrusions involved follow-on credential theft. One compromised identity can fuel the compromise of many more identities.&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-0v9w74on6 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"0v9w74on6\"><h3 class=\"wp-block-heading has-deep-dark-teal-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-400d5ae23d5fe1935a7f239d0af219e5\">46+ million<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\">Business contact impersonation (BCI) attacks detected over the past 12 months.&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-0v9w74on6 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"0v9w74on6\"><h3 class=\"wp-block-heading has-deep-dark-teal-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-ca166121d1d1e95c15f599d225ecc0ff\">25.5%<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\">Of observed cyber threat activity impacted customers in the United States from January 2025 &ndash; June 2026.&#8203;<\/p>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-exr1n5siy is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--lg)\" data-microsoft-breakpoint-id=\"exr1n5siy\"><h3 class=\"wp-block-heading has-segoe-sans-font-family has-body-2-xl-plus-fluid-font-size\">Top 10 global sectors impacted by threat actors in 2026&#8203;<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\">Attackers prioritize targets (e.g., government, IT, and research and academia) with high-value intelligence, extensive personally identifiable information, often under-monitored infrastructure, and a generally low tolerance for downtime.&#8203;<\/p>\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1139\" height=\"1550\" src=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Top-10-global-sectors-impacted-by-threat-actors-in-2026-e1790313371281.png\" alt=\"Bar chart ranking the top 10 global sectors targeted by threat actors in 2026. Government agencies and services lead at 27%, followed by information technology at 17% and research and academia at 14%. Communications infrastructure, transportation, NGOs, and other sectors follow in the single digits.&#8203;\" class=\"wp-image-4739\" style=\"aspect-ratio:0.7348391370419919;width:630px;height:auto\" srcset=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Top-10-global-sectors-impacted-by-threat-actors-in-2026-e1790313371281.png 1139w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Top-10-global-sectors-impacted-by-threat-actors-in-2026-e1790313371281-220x300.png 220w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Top-10-global-sectors-impacted-by-threat-actors-in-2026-e1790313371281-752x1024.png 752w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Top-10-global-sectors-impacted-by-threat-actors-in-2026-e1790313371281-768x1045.png 768w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Top-10-global-sectors-impacted-by-threat-actors-in-2026-e1790313371281-1129x1536.png 1129w\" sizes=\"auto, (max-width: 1139px) 100vw, 1139px\"><\/figure>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-qddc8iplm is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--lg)\" data-microsoft-breakpoint-id=\"qddc8iplm\"><h3 class=\"wp-block-heading has-segoe-sans-font-family has-body-2-xl-plus-fluid-font-size\">Nation state and geopolitical threats&#8203;<\/h3>\n\n\n<p class=\"has-link-color has-body-large-fluid-font-size wp-elements-0e7b72cc81e6be0867ee3c9c2681ce7a wp-block-paragraph\">Nation-state cyber activity is increasingly focused on gaining and maintaining trusted access to critical systems, identities, and digital ecosystems. Across China, Iran, North Korea, and Russia, state sponsored cyber operations continue to evolve toward more persistent, scalable, and strategically aligned access models, with a shared emphasis on long term positioning inside high-value environments.&#8203;<\/p>\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"2560\" height=\"1505\" src=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Regional_sample_of_activity-scaled.png\" alt=\"World map and regional data table showing observed nation-state cyber activity levels by country from July 2025 to June 2026, broken into four regions: Americas, Asia-Pacific, Europe, and Middle East and Africa. The United States, Taiwan, the United Kingdom, and Israel record the highest observed event counts in each region.&#8203;\" class=\"wp-image-4796\" srcset=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Regional_sample_of_activity-scaled.png 2560w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Regional_sample_of_activity-300x176.png 300w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Regional_sample_of_activity-1024x602.png 1024w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Regional_sample_of_activity-768x451.png 768w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Regional_sample_of_activity-1536x903.png 1536w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Regional_sample_of_activity-2048x1204.png 2048w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\"><\/figure>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-tb3dbob1n is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--lg);cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=46\" data-clickable-context=\"custom\" data-clickable-selector=\"\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"tb3dbob1n\"><h3 class=\"wp-block-heading has-body-2-xl-fluid-font-size\">Strengthen identity verification and reduce reliance on implicit trust&#8203;<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">Policymakers should push organizations to treat identity as a core security control, limit standing and privileged access, and require phishing-resistant authentication. They should also encourage faster remediation of internet-facing vulnerabilities and stronger cross-system visibility so attackers cannot use trusted credentials or fragmented security gaps to move undetected across an environment.&#8203;<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-secondary-alt\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link has-body-font-size has-custom-font-size wp-element-button has-inline-icon\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=46\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Read more\">Read more<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull has-brown-black-color has-mint-sky-fade-gradient-background has-text-color has-background has-link-color microsoft-breakpoint-id-psurt96dd wp-elements-b00c7638ef9e53b16e251536491678ed has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" id=\"section-cybercrime\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"psurt96dd\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-cy7ccc9fg layout-sidebar-layout is-layout-grid wp-container-core-group-is-layout-64935f53 wp-block-group-is-layout-grid\" data-microsoft-breakpoint-id=\"cy7ccc9fg\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-6aukwwgm5 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"6aukwwgm5\"><\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-latket7pk wp-container-content-9cfa9a5a has-global-padding is-layout-constrained wp-container-core-group-is-layout-0ed47fa0 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"latket7pk\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-wsj8wgvf2 has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"wsj8wgvf2\"><div data-bi-ct=\"group\" class=\"wp-block-group has-body-sm-font-size microsoft-breakpoint-id-mu39h65a4 is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-47bd5148 wp-block-group-is-layout-flex\" style=\"font-style:normal;font-weight:600;letter-spacing:0.15em;line-height:1;text-transform:uppercase\" data-microsoft-breakpoint-id=\"mu39h65a4\"><p class=\"has-clear-teal-background-color has-background wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-right:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs);padding-left:var(--wp--preset--spacing--xs)\">MDDR 2026 Report<\/p>\n\n\n<p class=\"has-light-teal-background-color has-background wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-right:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs);padding-left:var(--wp--preset--spacing--xs)\">Cybercrime<\/p>\n<\/div>\n\n\n<h2 class=\"wp-block-heading has-body-4-xl-fluid-font-size\">Cybercrime<\/h2>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">Cybercrime operates through interconnected criminal ecosystems that provide infrastructure, access, services, and expertise at scale. &#8203;<\/p>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">As these markets mature, and with the rise of AI, cybercrime has become increasingly resilient, adaptable, and transnational, requiring coordinated action across governments, industry, and law enforcement.&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-exr1n5siy is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--lg)\" data-microsoft-breakpoint-id=\"exr1n5siy\"><h3 class=\"wp-block-heading has-segoe-sans-font-family has-body-2-xl-plus-fluid-font-size\">Scale, speed, and automation are changing the game&#8203;<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\">While the tactics behind&nbsp;identity compromise remain largely unchanged, attackers are operating at greater scale and speed through automation and orchestration. Below is how the identity threat landscape has evolved, according to&nbsp;observations from the Microsoft Detection and Response Team (DART).&#8203;<\/p>\n\n\n<figure class=\"wp-block-table\"><table class=\"has-brown-black-color has-light-blue-background-color has-text-color has-background has-link-color has-fixed-layout\"><thead><tr><th class=\"has-text-align-left\" data-align=\"left\">Unchanged<\/th><th class=\"has-text-align-left\" data-align=\"left\">Changed<\/th><\/tr><\/thead><tbody><tr><td class=\"has-text-align-left\" data-align=\"left\">Identity compromise<\/td><td class=\"has-text-align-left\" data-align=\"left\">Scale of access<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\">Credential reuse<\/td><td class=\"has-text-align-left\" data-align=\"left\">Speed of execution<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\">Privilege escalation<\/td><td class=\"has-text-align-left\" data-align=\"left\">Increase of use of non-human identities<\/td><\/tr><tr><td class=\"has-text-align-left\" data-align=\"left\">Access misuse<\/td><td class=\"has-text-align-left\" data-align=\"left\">Automation and orchestration<\/td><\/tr><\/tbody><\/table><\/figure>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-odvg8bkj5 is-layout-grid wp-container-core-group-is-layout-a00448d6 wp-block-group-is-layout-grid\" data-microsoft-breakpoint-id=\"odvg8bkj5\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-j2cmov6d1 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"j2cmov6d1\"><h3 class=\"wp-block-heading has-deep-dark-teal-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-0987388e0af6869bfb987d2ad072571d\">145+ million<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\">QR-code phishing attacks detected between July 2025 and June 2026 by Microsoft Defender for Office 365.&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-0v9w74on6 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"0v9w74on6\"><h3 class=\"wp-block-heading has-deep-dark-teal-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-020b86d6698bb2e0b8e66697dff7acb0\">89-95%<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\">Of email phishing attachments led to a credential theft effort.&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-0v9w74on6 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"0v9w74on6\"><h3 class=\"wp-block-heading has-deep-dark-teal-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-bcb44d490c4ba332e0de1a510c4f4b38\">15.8%<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\">Increase year-on-year in ransom detonations against enterprises&#8203;.<\/p>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-exr1n5siy is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--lg)\" data-microsoft-breakpoint-id=\"exr1n5siy\"><h3 class=\"wp-block-heading has-segoe-sans-font-family has-body-2-xl-plus-fluid-font-size\">Ransomware: Impacted industries<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">Ransomware affects&nbsp;nearly every industry, with critical manufacturing the most heavily targeted sector by number of attacks. Below is the year-on-year change in ransomware detections across industries, according to Microsoft Threat Intelligence data.&#8203;<\/p>\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"2311\" height=\"1551\" src=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Impacted-industries-by-percent-year-over-year.png\" alt=\"Grouped bar chart showing year-on-year change in ransomware detections across 12 industries in 2025 and 2026. Critical manufacturing, information technology, and other business entities saw the largest number of ransomware detections.&#8203;\" class=\"wp-image-4730\" srcset=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Impacted-industries-by-percent-year-over-year.png 2311w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Impacted-industries-by-percent-year-over-year-300x201.png 300w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Impacted-industries-by-percent-year-over-year-1024x687.png 1024w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Impacted-industries-by-percent-year-over-year-768x515.png 768w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Impacted-industries-by-percent-year-over-year-1536x1031.png 1536w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Impacted-industries-by-percent-year-over-year-2048x1374.png 2048w\" sizes=\"auto, (max-width: 2311px) 100vw, 2311px\"><\/figure>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-qddc8iplm is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--lg)\" data-microsoft-breakpoint-id=\"qddc8iplm\"><h3 class=\"wp-block-heading has-segoe-sans-font-family has-body-2-xl-plus-fluid-font-size\">Disrupting Tycoon2FA<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">In March 2026, Microsoft collaborated with international law enforcement and industry partners to target the infrastructure supporting the phishing service. The team disrupted the servers where phishing pages were rendered and credentials were intercepted. By June, <a href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2026\/03\/04\/how-a-global-coalition-disrupted-tycoon\/%E2%80%8B\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Tycoon2FA\">Tycoon2FA<\/a> activity had fallen 95% from its November 2025 peak, while its share of CAPTCHA-gated phishing dropped from 76% to 12%.&#8203;<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-secondary-alt\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=68\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Read case study\">Read case study <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group has-light-teal-background-color has-background microsoft-breakpoint-id-tb3dbob1n is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--lg);cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=78\" data-clickable-context=\"custom\" data-clickable-selector=\"\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"tb3dbob1n\"><h3 class=\"wp-block-heading has-body-2-xl-fluid-font-size\">Disrupt the ransomware economy through coordinated policy and enforcement&#8203;<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">Governments should target the broader ransomware ecosystem by discouraging ransom payments, increasing accountability for safe-haven jurisdictions, strengthening cross-border enforcement, and imposing visible consequences through arrests, asset seizures, and infrastructure takedowns. Sustained public-private collaboration and intelligence sharing are critical to making these tools effective.&#8203;<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-secondary-alt\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link has-body-font-size has-custom-font-size wp-element-button has-inline-icon\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=78\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Read more\">Read more<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull has-brown-black-color has-sky-to-mint-gradient-background has-text-color has-background has-link-color has-body-large-fluid-font-size microsoft-breakpoint-id-psurt96dd wp-elements-1b439c2c9b140cf32e0318441c8723d1 has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" id=\"section-resilience\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"psurt96dd\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-17d3a3w2q layout-sidebar-layout is-layout-grid wp-container-core-group-is-layout-64935f53 wp-block-group-is-layout-grid\" data-microsoft-breakpoint-id=\"17d3a3w2q\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-6aukwwgm5 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"6aukwwgm5\"><\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-lwi0n8q96 wp-container-content-9cfa9a5a has-global-padding is-layout-constrained wp-container-core-group-is-layout-0ed47fa0 wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"lwi0n8q96\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-5n06ltfsp has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"5n06ltfsp\"><div data-bi-ct=\"group\" class=\"wp-block-group has-body-sm-font-size microsoft-breakpoint-id-mu39h65a4 is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-47bd5148 wp-block-group-is-layout-flex\" style=\"font-style:normal;font-weight:600;letter-spacing:0.15em;line-height:1;text-transform:uppercase\" data-microsoft-breakpoint-id=\"mu39h65a4\"><p class=\"has-clear-blue-background-color has-background wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-right:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs);padding-left:var(--wp--preset--spacing--xs)\">MDDR 2026 Report<\/p>\n\n\n<p class=\"has-light-blue-background-color has-background wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-right:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs);padding-left:var(--wp--preset--spacing--xs)\">Resilience<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-083o6xvdm has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"083o6xvdm\"><h2 class=\"wp-block-heading has-body-4-xl-fluid-font-size\">Resilience<\/h2>\n\n\n<p class=\"wp-block-paragraph\">Society depends on interconnected systems&mdash;from power and water to hospitals, schools, software supply chains, and subsea cables&mdash;so failures can quickly spread across sectors.&nbsp;The answer is not isolation, but building resilience across shared dependencies&nbsp;before a crisis happens.&#8203;<\/p>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-rr9upg19f is-layout-grid wp-container-core-group-is-layout-4d982a09 wp-block-group-is-layout-grid\" style=\"padding-top:var(--wp--preset--spacing--xl-fluid)\" data-microsoft-breakpoint-id=\"rr9upg19f\"><div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-j2cmov6d1 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"j2cmov6d1\"><h3 class=\"wp-block-heading has-deep-dark-teal-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-e2e68c174abe762be8b34e5d38420b7e\">78%<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\">Of observed attack techniques against critical infrastructure used cloud identity abuse&#8203;.<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-0v9w74on6 is-layout-flow wp-container-core-group-is-layout-ba83e0ff wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"0v9w74on6\"><h3 class=\"wp-block-heading has-deep-dark-teal-color has-text-color has-link-color has-body-2-xl-fluid-font-size wp-elements-ada21297fbd1500281f7a1310f2728e8\">60-70%<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\" style=\"border-top-color:var(--wp--preset--color--brown-black);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\">Organizations leveraging Microsoft Security Copilot report summarizing threats 60 to 70% faster, sharply cutting the mean time to resolve critical alerts. &#8203;<\/p>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-exr1n5siy is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--lg)\" data-microsoft-breakpoint-id=\"exr1n5siy\"><h3 class=\"wp-block-heading has-segoe-sans-font-family has-body-2-xl-plus-fluid-font-size\">Attacks against state and local government, education (SLED) and the critical infrastructure sector&#8203;<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">Research and academia is the most targeted SLED&nbsp;sector by a significant margin, accounting for 38% of observed attacks. Below is the breakdown of attacks across sectors, according to Microsoft Threat Intelligence data from November 2025 to April 2026.&#8203;<\/p>\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"1532\" height=\"1554\" src=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Figure-1-Attacks-against-SLED-and-the-critical-infrastructure-sector-e1790313560351.png\" alt=\"Horizontal bar chart showing attacks against SLED and critical infrastructure sectors from November 2025 to April 2026. Research and academia is the most targeted at 38%, followed by transportation systems at 22% and government agencies and services at 13%.&#8203;\n\" class=\"wp-image-4721\" style=\"aspect-ratio:0.985850700494877;width:749px;height:auto\" srcset=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Figure-1-Attacks-against-SLED-and-the-critical-infrastructure-sector-e1790313560351.png 1532w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Figure-1-Attacks-against-SLED-and-the-critical-infrastructure-sector-e1790313560351-296x300.png 296w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Figure-1-Attacks-against-SLED-and-the-critical-infrastructure-sector-e1790313560351-1010x1024.png 1010w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Figure-1-Attacks-against-SLED-and-the-critical-infrastructure-sector-e1790313560351-768x779.png 768w, https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/Figure-1-Attacks-against-SLED-and-the-critical-infrastructure-sector-e1790313560351-1514x1536.png 1514w\" sizes=\"auto, (max-width: 1532px) 100vw, 1532px\"><\/figure>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group microsoft-breakpoint-id-qddc8iplm is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--lg)\" data-microsoft-breakpoint-id=\"qddc8iplm\"><h3 class=\"wp-block-heading has-segoe-sans-font-family has-body-2-xl-plus-fluid-font-size\">Advancing Regional Cybersecurity (ARC) initiative&#8203;<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">Microsoft&rsquo;s Advancing Regional Cybersecurity (ARC) initiative uses scenario-based exercises and public-private collaboration to identify gaps in government coordination before an incident occurs. In Mexico, the work brought technical, civilian, and regulatory stakeholders together to test whole-of-government crisis response in preparation for the FIFA World Cup.&#8203;<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-secondary-alt\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=94\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Read case study\">Read case study <svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-background-color has-background microsoft-breakpoint-id-tb3dbob1n is-layout-flow wp-block-group-is-layout-flow\" style=\"padding-top:var(--wp--preset--spacing--md);padding-right:var(--wp--preset--spacing--lg);padding-bottom:var(--wp--preset--spacing--md);padding-left:var(--wp--preset--spacing--lg);cursor:pointer\" data-is-clickable=\"true\" data-clickable-url=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=96\" data-clickable-context=\"custom\" data-clickable-selector=\"\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"tb3dbob1n\"><h3 class=\"wp-block-heading has-body-2-xl-fluid-font-size\">Build for continuity, not just prevention<\/h3>\n\n\n<p class=\"has-body-large-fluid-font-size wp-block-paragraph\">Governments should treat resilience as a shared capability, investing in cross-agency coordination, common monitoring and response capacity, infrastructure redundancy, and regular exercises so essential services can continue when disruption occurs.&#8203;<\/p>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-secondary-alt\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link has-body-font-size has-custom-font-size wp-element-button has-inline-icon\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=96\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Read more\">Read more<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull has-deep-blue-background-color has-background microsoft-breakpoint-id-2ymbv1m4t has-global-padding is-layout-constrained wp-container-core-group-is-layout-391ff070 wp-block-group-is-layout-constrained\" id=\"additional-reports\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"2ymbv1m4t\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-oipoj962r is-layout-grid wp-container-core-group-is-layout-858e69ae wp-block-group-is-layout-grid\" style=\"border-top-color:var(--wp--preset--color--warm-ivory);border-top-width:2px;padding-top:var(--wp--preset--spacing--xs)\" data-microsoft-breakpoint-id=\"oipoj962r\"><h2 class=\"wp-block-heading has-warm-ivory-color has-text-color has-link-color has-body-2-xl-plus-fluid-font-size wp-elements-08c3a16518dfbf20a6189aa10779f557\">Additional report topics<\/h2>\n\n\n<p class=\"has-warm-ivory-color has-text-color has-link-color has-body-large-fluid-font-size wp-elements-6f2583b88483178d71a9e8924cbf9bc9 wp-block-paragraph\" style=\"padding-top:var(--wp--preset--spacing--xs);padding-bottom:var(--wp--preset--spacing--xs)\">Take a deeper dive into our 2026 Microsoft Digital Defense Report. Navigate to specific sections of the report below.&#8203;<\/p>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-jpx69utvl is-layout-grid wp-container-core-group-is-layout-a68336de wp-block-group-is-layout-grid\" data-microsoft-breakpoint-id=\"jpx69utvl\"><div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-color has-text-color has-link-color microsoft-breakpoint-id-3q0o1f1k2 wp-elements-6e2cb31ca4e781ce3e20fc6599ecc9a8 is-layout-flow wp-container-core-group-is-layout-f16a04fa wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"3q0o1f1k2\"><h3 class=\"wp-block-heading has-warm-ivory-color has-text-color has-link-color has-body-xl-fluid-font-size wp-elements-43b4565dde3a23e51ca584b3fe6d6fcd\">Introduction<\/h3>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-container-core-buttons-is-layout-8b6d8048 wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:100%\"><a data-bi-an=\"Additional report topics\" data-bi-ct=\"link\" data-bi-dlid=\"ms_digital_defense_report_2025_v1\" data-bi-dlnm=\"Microsoft Digital Defense Report 2025\" data-bi-dltype=\"pdf\" data-bi-ecn=\"Introductory statement by Amy Hogan-Burney and Igor Tsyganskiy\" data-bi-ehn=\"Microsoft Digital Defense Report 2025\" data-bi-hn=\"Microsoft Digital Defense Report 2025\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=4\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Introductory statement by Amy Hogan-Burney and Igor Tsyganskiy\">Opening statement by Terrell Cox and Mike Yeh<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:100%\"><a data-bi-an=\"Additional report topics\" data-bi-ct=\"link\" data-bi-dlid=\"ms_digital_defense_report_2025_v1\" data-bi-dlnm=\"Microsoft Digital Defense Report 2025\" data-bi-dltype=\"pdf\" data-bi-ecn=\"Introductory statement by Amy Hogan-Burney and Igor Tsyganskiy\" data-bi-ehn=\"Microsoft Digital Defense Report 2025\" data-bi-hn=\"Microsoft Digital Defense Report 2025\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=7\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Introductory statement by Amy Hogan-Burney and Igor Tsyganskiy\">Top 10 security priorities for organizations&#8203;<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:100%\"><a data-bi-an=\"Additional report topics\" data-bi-ct=\"link\" data-bi-dlid=\"ms_digital_defense_report_2025_v1\" data-bi-dlnm=\"Microsoft Digital Defense Report 2025\" data-bi-dltype=\"pdf\" data-bi-ecn=\"Introductory statement by Amy Hogan-Burney and Igor Tsyganskiy\" data-bi-ehn=\"Microsoft Digital Defense Report 2025\" data-bi-hn=\"Microsoft Digital Defense Report 2025\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=8\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Introductory statement by Amy Hogan-Burney and Igor Tsyganskiy\">Top 10 takeaways from this report&#8203;<\/a><\/div>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-color has-text-color has-link-color microsoft-breakpoint-id-3q0o1f1k2 wp-elements-4a61bec68e7638f1d455ed7a238bd554 is-layout-flow wp-container-core-group-is-layout-f16a04fa wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"3q0o1f1k2\"><h3 class=\"wp-block-heading has-warm-ivory-color has-text-color has-link-color has-body-xl-fluid-font-size wp-elements-b5064c017910a6eba362ada787b833c0\">AI<\/h3>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-container-core-buttons-is-layout-8b6d8048 wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:100%\"><a data-bi-an=\"Additional report topics\" data-bi-ct=\"link\" data-bi-dlid=\"ms_digital_defense_report_2025_v1\" data-bi-dlnm=\"Microsoft Digital Defense Report 2025\" data-bi-dltype=\"pdf\" data-bi-ecn=\"Introductory statement by Amy Hogan-Burney and Igor Tsyganskiy\" data-bi-ehn=\"Microsoft Digital Defense Report 2025\" data-bi-hn=\"Microsoft Digital Defense Report 2025\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=10\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Introductory statement by Amy Hogan-Burney and Igor Tsyganskiy\">The AI threat landscape<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=21\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Securing the AI ecosystem\">Securing the AI ecosystem<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=27\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"AI as the new attack surface\"><span style=\"text-decoration: underline;\">AI as the new attack surface<\/span><\/a><\/div>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-color has-text-color has-link-color microsoft-breakpoint-id-3q0o1f1k2 wp-elements-36ec7425b47928530e86378fad64289a is-layout-flow wp-container-core-group-is-layout-f16a04fa wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"3q0o1f1k2\"><h3 class=\"wp-block-heading has-warm-ivory-color has-text-color has-link-color has-body-xl-fluid-font-size wp-elements-9a5396a1e3057c156f2eea01acdbd11b\">The Threat Landscape<\/h3>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-container-core-buttons-is-layout-8b6d8048 wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:100%\"><a data-bi-an=\"Additional report topics\" data-bi-ct=\"link\" data-bi-dlid=\"ms_digital_defense_report_2025_v1\" data-bi-dlnm=\"Microsoft Digital Defense Report 2025\" data-bi-dltype=\"pdf\" data-bi-ecn=\"Introductory statement by Amy Hogan-Burney and Igor Tsyganskiy\" data-bi-ehn=\"Microsoft Digital Defense Report 2025\" data-bi-hn=\"Microsoft Digital Defense Report 2025\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=32\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Introductory statement by Amy Hogan-Burney and Igor Tsyganskiy\">The threat landscape in 2026<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=38\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Nation state and geopolitical threats\">Nation state and geopolitical threats<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=44\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"How modern intrusions begin\">How modern intrusions begin<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=54\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Detection, intelligence, and disruption\">Detection, intelligence, and disruption<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=59\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Securing the foundations\">Securing the foundations<\/a><\/div>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-color has-text-color has-link-color microsoft-breakpoint-id-3q0o1f1k2 wp-elements-3aaf26aaceb24b24adaf5059e5b43b04 is-layout-flow wp-container-core-group-is-layout-f16a04fa wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"3q0o1f1k2\"><h3 class=\"wp-block-heading has-warm-ivory-color has-text-color has-link-color has-body-xl-fluid-font-size wp-elements-8c4cca076e26e17b629dfe791b3c9bad\">Cybercrime<\/h3>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-container-core-buttons-is-layout-8b6d8048 wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:100%\"><a data-bi-an=\"Additional report topics\" data-bi-ct=\"link\" data-bi-dlid=\"ms_digital_defense_report_2025_v1\" data-bi-dlnm=\"Microsoft Digital Defense Report 2025\" data-bi-dltype=\"pdf\" data-bi-ecn=\"Introductory statement by Amy Hogan-Burney and Igor Tsyganskiy\" data-bi-ehn=\"Microsoft Digital Defense Report 2025\" data-bi-hn=\"Microsoft Digital Defense Report 2025\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=63\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Introductory statement by Amy Hogan-Burney and Igor Tsyganskiy\">Identity at the center of modern cyber risk<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=66\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"How attackers gain access\">How attackers gain access<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=69\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Legitimate access becomes the threat\">Legitimate access becomes the threat<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=75\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Ransomware: From access to impact\">Ransomware: From access to impact<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=78\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Cybercrime disruption and collective defense\">Cybercrime disruption and collective defense<\/a><\/div>\n<\/div>\n<\/div>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group has-light-blue-color has-text-color has-link-color microsoft-breakpoint-id-3q0o1f1k2 wp-elements-cd9977b4cfb5d35c35883fe66a5574e6 is-layout-flow wp-container-core-group-is-layout-f16a04fa wp-block-group-is-layout-flow\" data-microsoft-breakpoint-id=\"3q0o1f1k2\"><h3 class=\"wp-block-heading has-warm-ivory-color has-text-color has-link-color has-body-xl-fluid-font-size wp-elements-97b462c31d649a9b4a9faed7dd278bd8\">Resilience<\/h3>\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-container-core-buttons-is-layout-8b6d8048 wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=82\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Trust, software, and supply chain security\">Trust, software, and supply chain security<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=85\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Critical infrastructure and operational technology\">Critical infrastructure and operational technology<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=90\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"National resilience and geopolitical security\">National resilience and geopolitical security<\/a><\/div>\n\n\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-text-underline\" style=\"width:var(--wp--preset--dimension--100)\"><a data-bi-ct=\"button\" class=\"wp-block-button__link wp-element-button\" href=\"https:\/\/aka.ms\/Microsoft-Digital-Defense-Report-2026#page=97\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Preparing for the next security transition\">Preparing for the next security transition<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull has-white-color has-dark-blue-background-color has-text-color has-background has-link-color microsoft-breakpoint-id-owc3fyym7 wp-elements-322f0a6aaf37830d83b71c28aa0319ae has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" id=\"beyond\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"owc3fyym7\"><h2 class=\"wp-block-heading has-text-align-center has-body-4-xl-fluid-font-size\" style=\"padding-top:var(--wp--preset--spacing--sm);padding-bottom:var(--wp--preset--spacing--sm)\">Beyond our report<\/h2>\n\n\n<div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-njdtrv3zc has-global-padding is-content-justification-center is-layout-constrained wp-container-core-group-is-layout-7ab55d8a wp-block-group-is-layout-constrained\" data-microsoft-breakpoint-id=\"njdtrv3zc\"><div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\"><div class=\"wp-block-button is-style-outline mobile-full-width is-style-outline--6\" style=\"width:100%\"><a data-bi-an=\"Beyond our report\" data-bi-ct=\"link\" data-bi-ehn=\"Beyond our report\" data-bi-hn=\"Beyond our report\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/aka.ms\/MDDR2026_ExecutiveSummary\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Read the executive summary\">Read the executive summary<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n\n\n<div class=\"wp-block-button is-style-outline is-style-outline--7\" style=\"width:100%\"><a data-bi-an=\"Beyond our report\" data-bi-ct=\"link\" data-bi-ehn=\"Beyond our report\" data-bi-hn=\"Beyond our report\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/\/cybersecurity\/\" data-bi-cn=\"Read more about cybersecurity\">Read more about cybersecurity<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n\n\n<div class=\"wp-block-button is-style-outline is-style-outline--8\" style=\"width:100%\"><a data-bi-an=\"Beyond our report\" data-bi-ct=\"link\" data-bi-ehn=\"Beyond our report\" data-bi-hn=\"Beyond our report\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/customer-security-trust\" data-bi-cn=\"Learn about our cybersecurity programs\">Learn about our cybersecurity programs<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n\n\n<div class=\"wp-block-button is-style-outline is-style-outline--9\" style=\"width:100%\"><a data-bi-an=\"Beyond our report\" data-bi-ct=\"link\" data-bi-ehn=\"Beyond our report\" data-bi-hn=\"Beyond our report\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/reports-hub#trust%E2%80%8B\" data-bi-cn=\"Discover more Microsoft reports\">Discover more Microsoft reports<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n\n\n<div class=\"wp-block-button is-style-outline is-style-outline--10\" style=\"width:100%\"><a data-bi-an=\"Beyond our report\" data-bi-ct=\"link\" data-bi-ehn=\"Beyond our report\" data-bi-hn=\"Beyond our report\" class=\"wp-block-button__link wp-element-button has-inline-icon\" href=\"https:\/\/www.microsoft.com\/en-us\/security\/security-insider\" target=\"_blank\" rel=\"noreferrer noopener\" data-bi-cn=\"Cybersecurity for customers\">Cybersecurity for customers<svg class=\"ignite-wp-icon ignite-wp-icon--rendered\" style=\"width: 1em;\" focusable=\"false\" aria-hidden=\"true\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewbox=\"5.337 5.336 13.326 13.326\"><path fill=\"currentColor\" d=\"M18.663 18.337h-2V8.75l-9.912 9.912-1.414-1.414 9.912-9.912H5.663v-2h13v13Z\"><\/path><\/svg><\/a><\/div>\n<\/div>\n<\/div>\n<\/section>\n\n\n<section data-bi-ct=\"group\" class=\"wp-block-group alignfull has-white-color has-black-background-color has-text-color has-background has-link-color microsoft-breakpoint-id-b5cchxoa6 wp-elements-e93a3caec9441ee3a9ad0811508a277a has-global-padding is-layout-constrained wp-block-group-is-layout-constrained\" style=\"padding-top:var(--wp--preset--spacing--sm);padding-bottom:var(--wp--preset--spacing--sm)\" data-microsoft-breakpoint-id=\"b5cchxoa6\"><div data-bi-ct=\"group\" class=\"wp-block-group alignwide microsoft-breakpoint-id-aavd7ooad is-content-justification-space-between is-nowrap is-layout-flex wp-container-core-group-is-layout-f36ac205 wp-block-group-is-layout-flex\" data-microsoft-breakpoint-id=\"aavd7ooad\"><p class=\"has-body-large-fluid-font-size wp-block-paragraph\">Follow us<\/p>\n\n\n<ul class=\"wp-block-social-links has-normal-icon-size has-icon-color is-style-logos-only is-layout-flex wp-container-core-social-links-is-layout-b05b44e1 wp-block-social-links-is-layout-flex\"><li style=\"color:#fff\" class=\"wp-social-link wp-social-link-linkedin has-white-color wp-block-social-link\"><a data-bi-an=\"social media\" data-bi-ct=\"socialshare\" data-bi-ecn=\"Follow LinkedIn\" data-bi-ehn=\"Rail Menu\" data-bi-hn=\"Rail Menu\" data-bi-socchn=\"LinkedIn\" rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/www.linkedin.com\/showcase\/microsoft-on-the-issues\" class=\"wp-block-social-link-anchor\" data-bi-cn=\"Follow LinkedIn\"><svg width=\"24\" height=\"24\" viewbox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M19.7,3H4.3C3.582,3,3,3.582,3,4.3v15.4C3,20.418,3.582,21,4.3,21h15.4c0.718,0,1.3-0.582,1.3-1.3V4.3 C21,3.582,20.418,3,19.7,3z M8.339,18.338H5.667v-8.59h2.672V18.338z M7.004,8.574c-0.857,0-1.549-0.694-1.549-1.548 c0-0.855,0.691-1.548,1.549-1.548c0.854,0,1.547,0.694,1.547,1.548C8.551,7.881,7.858,8.574,7.004,8.574z M18.339,18.338h-2.669 v-4.177c0-0.996-0.017-2.278-1.387-2.278c-1.389,0-1.601,1.086-1.601,2.206v4.249h-2.667v-8.59h2.559v1.174h0.037 c0.356-0.675,1.227-1.387,2.526-1.387c2.703,0,3.203,1.779,3.203,4.092V18.338z\"><\/path><\/svg><span class=\"wp-block-social-link-label screen-reader-text\">LinkedIn<\/span><\/a><\/li>\n\n\n<li style=\"color:#fff\" class=\"wp-social-link wp-social-link-x has-white-color wp-block-social-link\"><a data-bi-an=\"social media\" data-bi-ct=\"socialshare\" data-bi-ecn=\"Follow X\" data-bi-ehn=\"Rail Menu\" data-bi-hn=\"Rail Menu\" data-bi-socchn=\"X\" rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/msftissues\" class=\"wp-block-social-link-anchor\" data-bi-cn=\"Follow X\"><svg width=\"24\" height=\"24\" viewbox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M13.982 10.622 20.54 3h-1.554l-5.693 6.618L8.745 3H3.5l6.876 10.007L3.5 21h1.554l6.012-6.989L15.868 21h5.245l-7.131-10.378Zm-2.128 2.474-.697-.997-5.543-7.93H8l4.474 6.4.697.996 5.815 8.318h-2.387l-4.745-6.787Z\"><\/path><\/svg><span class=\"wp-block-social-link-label screen-reader-text\">X<\/span><\/a><\/li>\n\n\n<li style=\"color:#fff\" class=\"wp-social-link wp-social-link-instagram has-white-color wp-block-social-link\"><a data-bi-an=\"social media\" data-bi-ct=\"socialshare\" data-bi-ecn=\"Follow Instagram\" data-bi-ehn=\"Rail Menu\" data-bi-hn=\"Rail Menu\" data-bi-socchn=\"Instagram\" rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/www.instagram.com\/msftissues\/\" class=\"wp-block-social-link-anchor\" data-bi-cn=\"Follow Instagram\"><svg width=\"24\" height=\"24\" viewbox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M12,4.622c2.403,0,2.688,0.009,3.637,0.052c0.877,0.04,1.354,0.187,1.671,0.31c0.42,0.163,0.72,0.358,1.035,0.673 c0.315,0.315,0.51,0.615,0.673,1.035c0.123,0.317,0.27,0.794,0.31,1.671c0.043,0.949,0.052,1.234,0.052,3.637 s-0.009,2.688-0.052,3.637c-0.04,0.877-0.187,1.354-0.31,1.671c-0.163,0.42-0.358,0.72-0.673,1.035 c-0.315,0.315-0.615,0.51-1.035,0.673c-0.317,0.123-0.794,0.27-1.671,0.31c-0.949,0.043-1.233,0.052-3.637,0.052 s-2.688-0.009-3.637-0.052c-0.877-0.04-1.354-0.187-1.671-0.31c-0.42-0.163-0.72-0.358-1.035-0.673 c-0.315-0.315-0.51-0.615-0.673-1.035c-0.123-0.317-0.27-0.794-0.31-1.671C4.631,14.688,4.622,14.403,4.622,12 s0.009-2.688,0.052-3.637c0.04-0.877,0.187-1.354,0.31-1.671c0.163-0.42,0.358-0.72,0.673-1.035 c0.315-0.315,0.615-0.51,1.035-0.673c0.317-0.123,0.794-0.27,1.671-0.31C9.312,4.631,9.597,4.622,12,4.622 M12,3 C9.556,3,9.249,3.01,8.289,3.054C7.331,3.098,6.677,3.25,6.105,3.472C5.513,3.702,5.011,4.01,4.511,4.511 c-0.5,0.5-0.808,1.002-1.038,1.594C3.25,6.677,3.098,7.331,3.054,8.289C3.01,9.249,3,9.556,3,12c0,2.444,0.01,2.751,0.054,3.711 c0.044,0.958,0.196,1.612,0.418,2.185c0.23,0.592,0.538,1.094,1.038,1.594c0.5,0.5,1.002,0.808,1.594,1.038 c0.572,0.222,1.227,0.375,2.185,0.418C9.249,20.99,9.556,21,12,21s2.751-0.01,3.711-0.054c0.958-0.044,1.612-0.196,2.185-0.418 c0.592-0.23,1.094-0.538,1.594-1.038c0.5-0.5,0.808-1.002,1.038-1.594c0.222-0.572,0.375-1.227,0.418-2.185 C20.99,14.751,21,14.444,21,12s-0.01-2.751-0.054-3.711c-0.044-0.958-0.196-1.612-0.418-2.185c-0.23-0.592-0.538-1.094-1.038-1.594 c-0.5-0.5-1.002-0.808-1.594-1.038c-0.572-0.222-1.227-0.375-2.185-0.418C14.751,3.01,14.444,3,12,3L12,3z M12,7.378 c-2.552,0-4.622,2.069-4.622,4.622S9.448,16.622,12,16.622s4.622-2.069,4.622-4.622S14.552,7.378,12,7.378z M12,15 c-1.657,0-3-1.343-3-3s1.343-3,3-3s3,1.343,3,3S13.657,15,12,15z M16.804,6.116c-0.596,0-1.08,0.484-1.08,1.08 s0.484,1.08,1.08,1.08c0.596,0,1.08-0.484,1.08-1.08S17.401,6.116,16.804,6.116z\"><\/path><\/svg><span class=\"wp-block-social-link-label screen-reader-text\">Instagram<\/span><\/a><\/li>\n<\/ul>\n<\/div>\n<\/section>\n<\/main>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft Digital Defense Report 2026In an era of interconnected&nbsp;risk, attackers are increasingly exploiting the trusted identities, systems, relationships, and services organizations rely on most. The 2026 Microsoft Digital Defense Report reveals a fundamental shift in cybersecurity with the interconnected digital ecosystem and the rise of AI. This report helps organizations decode what is needed to [&hellip;]<\/p>\n","protected":false},"author":23,"featured_media":4790,"menu_order":0,"template":"","meta":{"_microsoft_sidebar_content":"<!-- wp:group {\"metadata\":{\"name\":\"Social Share\"},\"style\":{\"spacing\":{\"blockGap\":\"var:preset|spacing|sm\"}},\"layout\":{\"type\":\"flex\",\"flexWrap\":\"nowrap\",\"justifyContent\":\"left\"},\"microsoftBreakpointId\":\"05xlfuiuy\"} -->\n<div class=\"wp-block-group microsoft-breakpoint-id-05xlfuiuy\" data-microsoft-breakpoint-id=\"05xlfuiuy\"><!-- wp:paragraph {\"style\":{\"typography\":{\"fontStyle\":\"normal\",\"fontWeight\":\"600\",\"textTransform\":\"uppercase\",\"letterSpacing\":\"6px\"}},\"fontSize\":\"body-sm\"} -->\n<p class=\"has-body-sm-font-size\" style=\"font-style:normal;font-weight:600;letter-spacing:6px;text-transform:uppercase\">Share<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:microsoft-social-share\/social-share {\"show_facebook\":false,\"order_share\":2,\"order_facebook\":3,\"order_x\":1,\"order_linkedin\":0,\"backgroundColor\":\"#291817\"} \/--><\/div>\n<!-- \/wp:group -->\n\n<!-- wp:group {\"isClickable\":true,\"style\":{\"spacing\":{\"padding\":{\"top\":\"var:preset|spacing|sm\",\"bottom\":\"var:preset|spacing|sm\",\"left\":\"var:preset|spacing|sm\",\"right\":\"var:preset|spacing|sm\"}}},\"layout\":{\"type\":\"default\"},\"blockVisibility\":{\"controlSets\":[{\"id\":1,\"enable\":true,\"controls\":{\"screenSize\":{\"hideOnScreenSize\":{\"small\":false}}}}]},\"clickableUrl\":\"https:\/\/aka.ms\/AIDiffusionReport2025\",\"clickableNewTab\":true,\"hoverBackgroundColor\":\"#5f4313\",\"hoverTextColor\":\"#fff1cc\",\"hoverLinkColor\":\"#fff1cc\",\"microsoftBreakpointId\":\"8vxt56kk0\"} -->\n<div class=\"wp-block-group has-hover-background has-hover-text has-hover-link microsoft-breakpoint-id-8vxt56kk0\" style=\"padding-top:var(--wp--preset--spacing--sm);padding-right:var(--wp--preset--spacing--sm);padding-bottom:var(--wp--preset--spacing--sm);padding-left:var(--wp--preset--spacing--sm);cursor:pointer;--hover-background-color:#5f4313;--hover-text-color:#fff1cc;--hover-link-color:#fff1cc\" data-is-clickable=\"true\" data-clickable-url=\"https:\/\/aka.ms\/AIDiffusionReport2025\" data-clickable-context=\"custom\" data-clickable-selector=\"\" data-clickable-new-tab=\"true\" data-microsoft-breakpoint-id=\"8vxt56kk0\"><!-- wp:heading {\"style\":{\"typography\":{\"lineHeight\":\"1.2\"}},\"fontSize\":\"body-xl-fluid\"} -->\n<h2 class=\"wp-block-heading has-body-xl-fluid-font-size\" style=\"line-height:1.2\"><a href=\"https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/01\/Microsoft-AI-Diffusion-Report-January-2026.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">AI Diffusion Report 2025<\/a><\/h2>\n<!-- \/wp:heading -->\n\n<!-- wp:buttons -->\n<div class=\"wp-block-buttons\"><!-- wp:button {\"width\":100,\"className\":\"is-style-secondary\",\"fontSize\":\"body-sm\"} -->\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-secondary\"><a class=\"wp-block-button__link has-body-sm-font-size has-custom-font-size wp-element-button\" href=\"https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/01\/Microsoft-AI-Diffusion-Report-January-2026.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">Download the report <img data-icon=\"arrow-right-corner\" data-icon-set=\"microsoft-theme-icons\" src=\"image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNkYAAAAAYAAjCB0C8AAAAASUVORK5CYII=\" style=\"width: 1em;)\" class=\"ignite-wp-icon\"><\/a><\/div>\n<!-- \/wp:button --><\/div>\n<!-- \/wp:buttons --><\/div>\n<!-- \/wp:group -->","_microsoft_bottom_content":"<!-- wp:group {\"align\":\"wide\",\"style\":{\"spacing\":{\"blockGap\":\"var:preset|spacing|xl-fluid\"}},\"layout\":{\"type\":\"grid\",\"minimumColumnWidth\":\"19rem\"},\"microsoftBreakpointId\":\"vg97ktoc2\"} -->\n<div class=\"wp-block-group alignwide microsoft-breakpoint-id-vg97ktoc2\" data-microsoft-breakpoint-id=\"vg97ktoc2\"><!-- wp:group {\"className\":\"temp-card\",\"layout\":{\"type\":\"flex\",\"orientation\":\"vertical\",\"justifyContent\":\"stretch\",\"verticalAlignment\":\"space-between\"},\"microsoftBreakpointId\":\"u2yoyazqp\"} -->\n<div class=\"wp-block-group temp-card microsoft-breakpoint-id-u2yoyazqp\" data-microsoft-breakpoint-id=\"u2yoyazqp\"><!-- wp:group {\"layout\":{\"type\":\"default\"}} -->\n<div class=\"wp-block-group\"><!-- wp:image {\"lightbox\":{\"enabled\":false},\"id\":2657,\"aspectRatio\":\"16\/9\",\"scale\":\"cover\",\"sizeSlug\":\"full\",\"linkDestination\":\"custom\"} -->\n<figure class=\"wp-block-image size-full\"><a href=\"https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2025\/10\/Microsoft-AI-Diffusion-Report.pdf\" target=\"_blank\" rel=\" noreferrer noopener\"><img src=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/\/wp-content\/uploads\/2026\/01\/FEATURED_CARD_2_REVISED-1-scaled.png\" alt=\"Abstract image of 3D blue wavy shapes\" class=\"wp-image-2657\" style=\"aspect-ratio:16\/9;object-fit:cover\" \/><\/a><\/figure>\n<!-- \/wp:image -->\n\n<!-- wp:heading {\"level\":3,\"style\":{\"typography\":{\"lineHeight\":\"1.3\"}},\"fontSize\":\"body-xl-fluid\"} -->\n<h3 class=\"wp-block-heading has-body-xl-fluid-font-size\" style=\"line-height:1.3\"><a href=\"https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2025\/10\/Microsoft-AI-Diffusion-Report.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">AI Diffusion Report: Where AI is most used, developed and built<\/a><\/h3>\n<!-- \/wp:heading --><\/div>\n<!-- \/wp:group -->\n\n<!-- wp:buttons {\"layout\":{\"type\":\"flex\",\"justifyContent\":\"left\"}} -->\n<div class=\"wp-block-buttons\"><!-- wp:button {\"width\":100,\"className\":\"is-style-secondary\",\"style\":{\"typography\":{\"textAlign\":\"right\"}},\"fontSize\":\"body-sm\"} -->\n<div class=\"wp-block-button has-custom-width wp-block-button__width-100 is-style-secondary\"><a class=\"wp-block-button__link has-text-align-right has-body-sm-font-size has-custom-font-size wp-element-button\" href=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/\/cybersecurity\/5-things-threat-analyst\/\">\n    <span class=\"screen-reader-text\">\n      Read \u201c5 things threat analysts wish you knew\u201d\n    <\/span>\n    <img data-icon=\"arrow-right-corner\" data-icon-set=\"microsoft-theme-icons\" src=\"image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNkYAAAAAYAAjCB0C8AAAAASUVORK5CYII=\" class=\"ignite-wp-icon\" style=\"width: 1em\" alt=\"\" aria-hidden=\"true\">\n  <\/a><\/div>\n<!-- \/wp:button --><\/div>\n<!-- \/wp:buttons --><\/div>\n<!-- \/wp:group --><\/div>\n<!-- \/wp:group -->","_microsoft_story_hero_content":"<!-- wp:group {\"align\":\"full\",\"className\":\"is-style-default\",\"style\":{\"spacing\":{\"padding\":{\"top\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"right\":\"0\"},\"margin\":{\"top\":\"0\",\"bottom\":\"0\"}},\"typography\":{\"fontStyle\":\"normal\",\"fontWeight\":\"600\",\"textTransform\":\"uppercase\",\"letterSpacing\":\"0.15em\",\"lineHeight\":\"1\"}},\"fontSize\":\"body-xs\",\"layout\":{\"type\":\"flex\",\"flexWrap\":\"nowrap\",\"justifyContent\":\"left\"},\"microsoftBreakpointId\":\"zmxsh4o4w\"} -->\n<div class=\"wp-block-group alignfull is-style-default has-body-xs-font-size microsoft-breakpoint-id-zmxsh4o4w\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0;font-style:normal;font-weight:600;letter-spacing:0.15em;line-height:1;text-transform:uppercase\" data-microsoft-breakpoint-id=\"zmxsh4o4w\"><!-- wp:paragraph {\"className\":\"is-taxonomy-category wp-elements-98167e292a8a17658d2edb5c32d10470 wp-block-tenup-post-primary-term has-text-color has-clear-yellow-color has-background has-brown-black-background-color\"} -->\n<p class=\"is-taxonomy-category wp-elements-98167e292a8a17658d2edb5c32d10470 wp-block-tenup-post-primary-term has-text-color has-clear-yellow-color has-background has-brown-black-background-color\">AI DIFFUSION REPORT<\/p>\n<!-- \/wp:paragraph --><\/div>\n<!-- \/wp:group -->\n\n<!-- wp:group {\"align\":\"wide\",\"style\":{\"layout\":{\"selfStretch\":\"fit\",\"flexSize\":\"\"}},\"layout\":{\"type\":\"constrained\",\"justifyContent\":\"left\",\"contentSize\":\"800px\"},\"microsoftBreakpointId\":\"kgbedb7qx\"} -->\n<div class=\"wp-block-group alignwide microsoft-breakpoint-id-kgbedb7qx\" data-microsoft-breakpoint-id=\"kgbedb7qx\"><!-- wp:post-title {\"level\":1,\"style\":{\"typography\":{\"lineHeight\":\"1.2\"}},\"fontSize\":\"body-4-xl-fluid\"} \/--><\/div>\n<!-- \/wp:group -->","_microsoft_post_header_content":"<!-- wp:group {\"align\":\"full\",\"style\":{\"spacing\":{\"padding\":{\"top\":\"var:preset|spacing|2-xl-fluid\",\"bottom\":\"var:preset|spacing|2-xl-fluid\"}}},\"layout\":{\"type\":\"constrained\"},\"microsoftBreakpointId\":\"yfhgkpapz\"} -->\n<div class=\"wp-block-group alignfull microsoft-breakpoint-id-yfhgkpapz\" style=\"padding-top:var(--wp--preset--spacing--2-xl-fluid);padding-bottom:var(--wp--preset--spacing--2-xl-fluid)\" data-microsoft-breakpoint-id=\"yfhgkpapz\"><!-- wp:group {\"align\":\"wide\",\"className\":\"is-style-default\",\"style\":{\"spacing\":{\"padding\":{\"top\":\"0\",\"bottom\":\"0\",\"left\":\"0\",\"right\":\"0\"},\"margin\":{\"top\":\"0\",\"bottom\":\"0\"}},\"typography\":{\"fontStyle\":\"normal\",\"fontWeight\":\"600\",\"textTransform\":\"uppercase\",\"letterSpacing\":\"0.15em\",\"lineHeight\":\"1\"}},\"fontSize\":\"body-xs\",\"layout\":{\"type\":\"flex\",\"flexWrap\":\"nowrap\",\"justifyContent\":\"left\"},\"microsoftBreakpointId\":\"zmxsh4o4w\"} -->\n<div class=\"wp-block-group alignwide is-style-default has-body-xs-font-size microsoft-breakpoint-id-zmxsh4o4w\" style=\"margin-top:0;margin-bottom:0;padding-top:0;padding-right:0;padding-bottom:0;padding-left:0;font-style:normal;font-weight:600;letter-spacing:0.15em;line-height:1;text-transform:uppercase\" data-microsoft-breakpoint-id=\"zmxsh4o4w\"><!-- wp:paragraph {\"className\":\"is-taxonomy-category wp-elements-98167e292a8a17658d2edb5c32d10470 wp-block-tenup-post-primary-term has-text-color has-clear-yellow-color has-background has-brown-black-background-color\"} -->\n<p class=\"is-taxonomy-category wp-elements-98167e292a8a17658d2edb5c32d10470 wp-block-tenup-post-primary-term has-text-color has-clear-yellow-color has-background has-brown-black-background-color\">AI DIFFUSION REPORT<\/p>\n<!-- \/wp:paragraph --><\/div>\n<!-- \/wp:group -->\n\n<!-- wp:group {\"metadata\":{\"name\":\"Group - Content with Aside\"},\"align\":\"wide\",\"className\":\"is-style-post-header\",\"layout\":{\"type\":\"flex\",\"flexWrap\":\"wrap\",\"justifyContent\":\"space-between\",\"verticalAlignment\":\"bottom\"},\"microsoftBreakpointId\":\"3xxgrttak\"} -->\n<div class=\"wp-block-group alignwide is-style-post-header microsoft-breakpoint-id-3xxgrttak\" data-microsoft-breakpoint-id=\"3xxgrttak\"><!-- wp:group {\"metadata\":{\"name\":\"Group - Content\"},\"style\":{\"layout\":{\"selfStretch\":\"fit\",\"flexSize\":\"\"}},\"layout\":{\"type\":\"default\"},\"microsoftBreakpointId\":\"kgbedb7qx\"} -->\n<div class=\"wp-block-group microsoft-breakpoint-id-kgbedb7qx\" data-microsoft-breakpoint-id=\"kgbedb7qx\"><!-- wp:post-title {\"level\":1,\"style\":{\"typography\":{\"lineHeight\":\"1.2\"}},\"fontSize\":\"body-4-xl-fluid\"} \/--><\/div>\n<!-- \/wp:group --><\/div>\n<!-- \/wp:group --><\/div>\n<!-- \/wp:group -->","_microsoft_post_header_image_content":"<!-- wp:cover {\"useFeaturedImage\":true,\"dimRatio\":0,\"customOverlayColor\":\"#FFF\",\"isUserOverlayColor\":false,\"minHeight\":537,\"isDark\":false,\"metadata\":{\"name\":\"Featured Image\"},\"align\":\"full\",\"layout\":{\"type\":\"constrained\",\"wideSize\":\"\",\"contentSize\":\"\"},\"blockVisibility\":{\"controlSets\":[{\"id\":1,\"enable\":true,\"controls\":{\"screenSize\":{\"hideOnScreenSize\":{\"small\":false,\"medium\":false}}}}]},\"enableFade\":true,\"fadeStartPercentage\":69} -->\n<div class=\"wp-block-cover alignfull is-light fade-bottom\" style=\"min-height:537px;--fade-start:69%;--fade-end:100%\"><span aria-hidden=\"true\" class=\"wp-block-cover__background has-background-dim-0 has-background-dim\" style=\"background-color:#FFF\"><\/span><div class=\"wp-block-cover__inner-container\"><!-- wp:paragraph {\"placeholder\":\"Write title\u2026\",\"style\":{\"typography\":{\"textAlign\":\"center\"}},\"fontSize\":\"large\"} -->\n<p class=\"has-text-align-center has-large-font-size\"><\/p>\n<!-- \/wp:paragraph --><\/div><\/div>\n<!-- \/wp:cover -->","_microsoft_story_content_prefix_content":"<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"id\":2886,\"sizeSlug\":\"full\",\"linkDestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/\/wp-content\/uploads\/2026\/01\/AI-Economy-institute_TeamLogo-Color-1-768x56-1-300x22-1.png\" alt=\"Author AI Economy Institute Logo\" class=\"wp-image-2886\" \/><\/figure>\n<!-- \/wp:image --><\/div>\n<!-- \/wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:post-date {\"textAlign\":\"right\",\"format\":\"M j, Y\",\"metadata\":{\"bindings\":{\"datetime\":{\"source\":\"core\/post-data\",\"args\":{\"field\":\"date\"}}}}} \/--><\/div>\n<!-- \/wp:column --><\/div>\n<!-- \/wp:columns -->","_microsoft_story_content_suffix_content":"<!-- wp:heading -->\n<h2 class=\"wp-block-heading\">References<\/h2>\n<!-- \/wp:heading -->\n\n<!-- wp:paragraph {\"placeholder\":\"Add content to this area...\",\"anchor\":\"fn:1\"} -->\n<p id=\"fn:1\"><a href=\"#r1\" data-type=\"internal\" data-id=\"#r1\">[1]<\/a> A. Misra, J. Wang, S. McCullers, K. White, and J. L. Ferres, \u201cMeasuring AI Diffusion: A Population-Normalized Metric for Tracking Global AI Usage,\u201d Nov. 04, 2025,&nbsp;<em>arXiv<\/em>: arXiv:2511.02781.&nbsp;doi: 10.48550\/arXiv.2511.02781.&nbsp;<a href=\"https:\/\/nam06.safelinks.protection.outlook.com\/?url=https%3A%2F%2Farxiv.org%2Fabs%2F2511.02781&amp;data=05%7C02%7Chardyurs%40microsoft.com%7C3bb2a8e10bf74746400a08de4ed60a99%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C639034878358189435%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&amp;sdata=obUF%2Bl9THO%2B02pEnkl6302Q00V%2BbHK62bVLksRDc2ZQ%3D&amp;reserved=0\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/arxiv.org\/abs\/2511.02781<\/a><\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:2\"} -->\n<p id=\"fn:2\"><a href=\"#r2\">[2]<\/a> \u201cOpenAI Korea set to launch next month - The Korea Times.\u201d&nbsp;<a href=\"https:\/\/www.koreatimes.co.kr\/business\/companies\/20250828\/openai-korea-set-to-launch-next-month\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.koreatimes.co.kr\/business\/companies\/20250828\/openai-korea-set-to-launch-next-month<\/a>&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:3\"} -->\n<p id=\"fn:3\"><a href=\"#r3\">[3]<\/a> S. Rai, L. Prinsloo, and H. Nyambura,&nbsp;\u201cChina\u2019s DeepSeek Is Beating Out OpenAI and Google in Africa (1).\u201d&nbsp;Bloomberg News.&nbsp;<a href=\"https:\/\/news.bloomberglaw.com\/artificial-intelligence\/chinas-ai-ambitions-reach-africa-with-deepseek-push\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/news.bloomberglaw.com\/artificial-intelligence\/chinas-ai-ambitions-reach-africa-with-deepseek-push<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:4\"} -->\n<p id=\"fn:4\"><a href=\"#r4\">[4]<\/a> M. Joon-hyun, \u201cS. Korea is global No. 2 in paid ChatGPT users, OpenAI says. But does that mean&nbsp;anything?,\u201d The Korea Herald.&nbsp;<a href=\"https:\/\/www.koreaherald.com\/article\/10500190\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.koreaherald.com\/article\/10500190<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:5\"} -->\n<p id=\"fn:5\"><a href=\"#r5-6\">[5]<\/a> \u201cPress Releases:&nbsp;Korea.net\u202f:&nbsp;The official website of the Republic of Korea.\u201d&nbsp;<a href=\"https:\/\/www.korea.net\/Government\/Briefing-Room\/Press-Releases\/view?articleId=8243&amp;insttCode=A110439&amp;type=O&amp;utm_source=chatgpt.com\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.korea.net\/Government\/Briefing-Room\/Press-Releases\/view?articleId=8243&amp;insttCode=A110439&amp;type=O&amp;utm_source=chatgpt.com<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:6\"} -->\n<p id=\"fn:6\"><a href=\"#r5-6\">[6]<\/a> \u201cAI Basic Act of the Republic of Korea.\u201d&nbsp;<a href=\"https:\/\/aibasicact.kr\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/aibasicact.kr\/<\/a><\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:7\"} -->\n<p id=\"fn:7\"><a href=\"#r7\">[7]<\/a> \u201cSouth Korea investing&nbsp;$1.2 billion&nbsp;to teach AI from elementary school to the workplace,\u201d&nbsp;The Straits Times.&nbsp;<a href=\"https:\/\/www.straitstimes.com\/asia\/east-asia\/south-korea-investing-1-2-billion-to-teach-ai-from-elementary-school-to-the-workplace\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.straitstimes.com\/asia\/east-asia\/south-korea-investing-1-2-billion-to-teach-ai-from-elementary-school-to-the-workplace<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:8\"} -->\n<p id=\"fn:8\"><a href=\"#r8\">[8]<\/a> Marker-Inc-Korea\/Korean-SAT-LLM-Leaderboard.&nbsp;<a href=\"https:\/\/github.com\/Marker-Inc-Korea\/Korean-SAT-LLM-Leaderboard\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/github.com\/Marker-Inc-Korea\/Korean-SAT-LLM-Leaderboard<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:9\"} -->\n<p id=\"fn:9\"><a href=\"#r9-11\">[9]<\/a> N.&nbsp;Canelakes,&nbsp;\u201cThe latest version of ChatGPT is passing formal exams left and right.\u201d&nbsp;<a href=\"https:\/\/theamericangenius.com\/housing\/real-estate-tech\/chatgpt-passing-exams\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/theamericangenius.com\/housing\/real-estate-tech\/chatgpt-passing-exams\/<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:10\"} -->\n<p id=\"fn:10\"><a href=\"#r9-11\">[10]<\/a> \u201cChatGPT-4\u2019s SAT Score Prompts Discussion on Responsible AI Use in Education.\u201d&nbsp;<a href=\"https:\/\/collegeprep.study.com\/sat-exam\/chatgpt-sat-score-prompts-discussion-on-responsible-ai-use.html\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/collegeprep.study.com\/sat-exam\/chatgpt-sat-score-prompts-discussion-on-responsible-ai-use.html<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:11\"} -->\n<p id=\"fn:11\"><a href=\"#r9-11\">[11]<\/a> \u201cK.&nbsp;Leswing,&nbsp;\u201cOpenAI announces GPT-4, claims it can beat 90% of humans on the SAT,\u201d CNBC.&nbsp;<a href=\"https:\/\/www.cnbc.com\/2023\/03\/14\/openai-announces-gpt-4-says-beats-90percent-of-humans-on-sat.html\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.cnbc.com\/2023\/03\/14\/openai-announces-gpt-4-says-beats-90percent-of-humans-on-sat.html<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:12\"} -->\n<p id=\"fn:12\"><a href=\"#r12-13\">[12]<\/a> \u201c\u2018Ghibli-style\u2019 images drive ChatGPT usage surge in Korea, setting daily record.\u201d&nbsp;The Korea Times.&nbsp;<a href=\"https:\/\/www.koreatimes.co.kr\/lifestyle\/trends\/20250401\/ghibli-style-images-drive-chatgpt-usage-surge-in-korea-setting-daily-record\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.koreatimes.co.kr\/lifestyle\/trends\/20250401\/ghibli-style-images-drive-chatgpt-usage-surge-in-korea-setting-daily-record<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:13\"} -->\n<p id=\"fn:13\"><a href=\"#r12-13\">[13]<\/a> \u201cChatGPT image generation fuels user surge in S. Korea,\u201d&nbsp;<a href=\"https:\/\/www.donga.com\/en\/article\/all\/20250402\/5529166\/1\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.donga.com\/en\/article\/all\/20250402\/5529166\/1<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:14\"} -->\n<p id=\"fn:14\"><a href=\"#r14-15\">[14]<\/a> \u201cUAE Strategy for Artificial Intelligence | The Official Platform of the UAE Government.\u201d&nbsp;<a href=\"https:\/\/u.ae\/en\/about-the-uae\/strategies-initiatives-and-awards\/strategies-plans-and-visions\/government-services-and-digital-transformation\/uae-strategy-for-artificial-intelligence\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/u.ae\/en\/about-the-uae\/strategies-initiatives-and-awards\/strategies-plans-and-visions\/government-services-and-digital-transformation\/uae-strategy-for-artificial-intelligence<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:15\"} -->\n<p id=\"fn:15\"><a href=\"#r14-15\">[15]<\/a> \u201c2025 Edelman Trust&nbsp;Barometer_Insights&nbsp;Technology Sector_FINAL.pdf.\u201d&nbsp;<a href=\"https:\/\/www.edelman.com\/sites\/g\/files\/aatuss191\/files\/2025-02\/2025%20Edelman%20Trust%20Barometer_Insights%20Technology%20Sector_FINAL.pdf#page=5.00\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.edelman.com\/sites\/g\/files\/aatuss191\/files\/2025-02\/2025%20Edelman%20Trust%20Barometer_Insights%20Technology%20Sector_FINAL.pdf#page=5.00<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:16\"} -->\n<p id=\"fn:16\"><a href=\"#r16-17\">[16]<\/a> \u201cRegulatory sandboxes in the UAE | The Official Platform of the UAE Government.\u201d&nbsp;<a href=\"https:\/\/u.ae\/fi\/about-the-uae\/digital-uae\/regulatory-framework\/regulatory-sandboxes-in-the-uae\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/u.ae\/fi\/about-the-uae\/digital-uae\/regulatory-framework\/regulatory-sandboxes-in-the-uae<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:17\"} -->\n<p id=\"fn:17\"><a href=\"#r16-17\">[17]<\/a> \u201cGolden visa | The Official Platform of the UAE Government.\u201d&nbsp;<a href=\"https:\/\/u.ae\/pt\/information-and-services\/visa-and-emirates-id\/residence-visas\/golden-visa\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/u.ae\/pt\/information-and-services\/visa-and-emirates-id\/residence-visas\/golden-visa<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:18\"} -->\n<p id=\"fn:18\"><a href=\"#r18\">[18]<\/a> \u201cA look under the hood of DeepSeek\u2019s AI models doesn\u2019t provide all the answers.\u201d&nbsp;&nbsp;<a href=\"https:\/\/www.sciencenews.org\/article\/ai-model-deepseek-answers-training\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.sciencenews.org\/article\/ai-model-deepseek-answers-training<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:19\"} -->\n<p id=\"fn:19\"><a href=\"#r19-21\">[19]<\/a>&nbsp; \u201cDeepSeek vs ChatGPT: Which LLM is Better?\u201d&nbsp;<a href=\"https:\/\/explodingtopics.com\/blog\/deepseek-vs-chatgpt\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/explodingtopics.com\/blog\/deepseek-vs-chatgpt<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"anchor\":\"fn:20\"} -->\n<p id=\"fn:20\"><a href=\"#r19-21\">[20]<\/a> \u201cChina\u2019s DeepSeek Is Beating Out OpenAI and Google in Africa,\u201d&nbsp;Bloomberg.&nbsp;<a href=\"https:\/\/www.bloomberg.com\/news\/features\/2025-10-22\/china-s-deepseek-pushes-into-africa-making-ai-accessible-to-millions\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.bloomberg.com\/news\/features\/2025-10-22\/china-s-deepseek-pushes-into-africa-making-ai-accessible-to-millions<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->\n\n<!-- wp:paragraph {\"placeholder\":\"Add content to this area...\",\"anchor\":\"fn:21\"} -->\n<p id=\"fn:21\"><a href=\"#r19-21\">[21]<\/a> \u201cDeepSeek R1: Implications of a New AI Era for Africa,\u201d Carnegie Endowment for International Peace.&nbsp;&nbsp;<a href=\"https:\/\/carnegieendowment.org\/posts\/2025\/03\/deepseek-ai-implications-africa?lang=en\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/carnegieendowment.org\/posts\/2025\/03\/deepseek-ai-implications-africa?lang=en<\/a>&nbsp;&nbsp;<\/p>\n<!-- \/wp:paragraph -->","_microsoft_post_content_prefix_content":"<!-- wp:columns -->\n<div class=\"wp-block-columns\"><!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:image {\"sizeSlug\":\"full\",\"linkDestination\":\"none\"} -->\n<figure class=\"wp-block-image size-full\"><img src=\"\/wp-content\/themes\/microsoft-cela\/dist\/images\/ai-economy-institute-team-logo.png\" alt=\"Microsoft - AI Economy Institute\" \/><\/figure>\n<!-- \/wp:image --><\/div>\n<!-- \/wp:column -->\n\n<!-- wp:column -->\n<div class=\"wp-block-column\"><!-- wp:post-date {\"textAlign\":\"right\",\"format\":\"M j, Y\",\"metadata\":{\"bindings\":{\"datetime\":{\"source\":\"core\/post-data\",\"args\":{\"field\":\"date\"}}}}} \/--><\/div>\n<!-- \/wp:column --><\/div>\n<!-- \/wp:columns -->","_microsoft_post_content_suffix_content":"<!-- wp:paragraph {\"placeholder\":\"Add content to this area...\"} -->\n<p><\/p>\n<!-- \/wp:paragraph -->","_microsoft_author-bio_content":"","_microsoft_responsive_featured_images":[],"_microsoft_use_source_image":false,"_microsoft_color_scheme":"default","footnotes":""},"topic":[48],"class_list":["post-4709","reports","type-reports","status-publish","has-post-thumbnail","hentry","topic-cybersecurity"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.5 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Microsoft Digital Defense Report 2026 | Microsoft<\/title>\n<meta name=\"description\" content=\"This year&#039;s MDDR showcases the scale and sophistication of today&#039;s cyber threats, the impact of emerging technologies, and the strategies that leaders, governments, and defenders can use to defend against them.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft Digital Defense Report 2026 | Microsoft\" \/>\n<meta property=\"og:description\" content=\"This year&#039;s MDDR showcases the scale and sophistication of today&#039;s cyber threats, the impact of emerging technologies, and the strategies that leaders, governments, and defenders can use to defend against them.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/\" \/>\n<meta property=\"og:site_name\" content=\"Microsoft Corporate Responsibility\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-02T20:04:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/bcbfcc53c7f9bdb8fd342f56d3b42de0c071f43b-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"2362\" \/>\n\t<meta property=\"og:image:height\" content=\"1335\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"16 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/topics\\\/cybersecurity\\\/reports\\\/microsoft-digital-defense-report\\\/\",\"url\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/topics\\\/cybersecurity\\\/reports\\\/microsoft-digital-defense-report\\\/\",\"name\":\"Microsoft Digital Defense Report 2026 | Microsoft\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/topics\\\/cybersecurity\\\/reports\\\/microsoft-digital-defense-report\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/topics\\\/cybersecurity\\\/reports\\\/microsoft-digital-defense-report\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/bcbfcc53c7f9bdb8fd342f56d3b42de0c071f43b-1.jpg\",\"datePublished\":\"2026-10-01T14:00:12+00:00\",\"dateModified\":\"2026-10-02T20:04:57+00:00\",\"description\":\"This year's MDDR showcases the scale and sophistication of today's cyber threats, the impact of emerging technologies, and the strategies that leaders, governments, and defenders can use to defend against them.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/topics\\\/cybersecurity\\\/reports\\\/microsoft-digital-defense-report\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/topics\\\/cybersecurity\\\/reports\\\/microsoft-digital-defense-report\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/topics\\\/cybersecurity\\\/reports\\\/microsoft-digital-defense-report\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/bcbfcc53c7f9bdb8fd342f56d3b42de0c071f43b-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/bcbfcc53c7f9bdb8fd342f56d3b42de0c071f43b-1.jpg\",\"width\":2362,\"height\":1335},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/topics\\\/cybersecurity\\\/reports\\\/microsoft-digital-defense-report\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Reports\",\"item\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/reports\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Microsoft Digital Defense Report 2026\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/#website\",\"url\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/\",\"name\":\"Corporate Responsibility\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/#organization\",\"name\":\"Corporate Responsibility\",\"url\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"\",\"contentUrl\":\"\",\"caption\":\"Corporate Responsibility\"},\"image\":{\"@id\":\"https:\\\/\\\/www.microsoft.com\\\/en-us\\\/corporate-responsibility\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft Digital Defense Report 2026 | Microsoft","description":"This year's MDDR showcases the scale and sophistication of today's cyber threats, the impact of emerging technologies, and the strategies that leaders, governments, and defenders can use to defend against them.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft Digital Defense Report 2026 | Microsoft","og_description":"This year's MDDR showcases the scale and sophistication of today's cyber threats, the impact of emerging technologies, and the strategies that leaders, governments, and defenders can use to defend against them.","og_url":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/","og_site_name":"Microsoft Corporate Responsibility","article_modified_time":"2026-10-02T20:04:57+00:00","og_image":[{"width":2362,"height":1335,"url":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/bcbfcc53c7f9bdb8fd342f56d3b42de0c071f43b-1.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"16 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/","url":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/","name":"Microsoft Digital Defense Report 2026 | Microsoft","isPartOf":{"@id":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/#primaryimage"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/#primaryimage"},"thumbnailUrl":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/bcbfcc53c7f9bdb8fd342f56d3b42de0c071f43b-1.jpg","datePublished":"2026-10-01T14:00:12+00:00","dateModified":"2026-10-02T20:04:57+00:00","description":"This year's MDDR showcases the scale and sophistication of today's cyber threats, the impact of emerging technologies, and the strategies that leaders, governments, and defenders can use to defend against them.","breadcrumb":{"@id":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/#primaryimage","url":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/bcbfcc53c7f9bdb8fd342f56d3b42de0c071f43b-1.jpg","contentUrl":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-content\/uploads\/2026\/09\/bcbfcc53c7f9bdb8fd342f56d3b42de0c071f43b-1.jpg","width":2362,"height":1335},{"@type":"BreadcrumbList","@id":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/topics\/cybersecurity\/reports\/microsoft-digital-defense-report\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/"},{"@type":"ListItem","position":2,"name":"Reports","item":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/reports\/"},{"@type":"ListItem","position":3,"name":"Microsoft Digital Defense Report 2026"}]},{"@type":"WebSite","@id":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/#website","url":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/","name":"Corporate Responsibility","description":"","publisher":{"@id":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/#organization","name":"Corporate Responsibility","url":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/#\/schema\/logo\/image\/","url":"","contentUrl":"","caption":"Corporate Responsibility"},"image":{"@id":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/reports\/4709","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/reports"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/types\/reports"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/users\/23"}],"version-history":[{"count":0,"href":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/reports\/4709\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/media\/4790"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/media?parent=4709"}],"wp:term":[{"taxonomy":"topic","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/corporate-responsibility\/wp-json\/wp\/v2\/topic?post=4709"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}