Inside this year’s Microsoft Digital Defense Report

Microsoft Threat Intelligence’s Chloe and Karen Frost unpack Microsoft’s annual Digital Defense Report and its executive message for CIOs: AI is making cyber risk faster, more scalable, and more interconnected. They highlight how defenders must shift from point controls to ecosystem resilience, using phishing-resistant MFA, practiced incident response, and AI governance with visibility and data controls.

Key points

• AI is turbocharging existing threats, especially phishing, ransomware, and nation-state activity, by increasing speed, scale, and automation.
• AI agents may let one attacker run many parallel intrusions, multiplying pressure on defenders.
• Public CVEs may reach 72,000 this year, and some vulnerabilities can be weaponized in under 24 hours.
• Most successful intrusions still arrive through phishing and spear phishing, not just direct technical exploitation.
• CISOs should focus on phishing-resistant MFA, current incident response drills, and AI governance with strong visibility and data controls.
• Security metrics should measure risk reduction, patch velocity, and whether red-team and breach-exercise lessons are operationalized.