AI Drives Cyberattacks to New Speeds Challenging Defenders

Microsoft's Digital Defense Report 2026 reveals that artificial intelligence is drastically shortening the cyber-attack lifecycle, reducing it from days to mere minutes. The report highlights how threat actors are increasingly leveraging AI, especially agentic models, to streamline various stages of cyberattacks, including initial access, vulnerability discovery, social engineering, and malware generation. This rapid acceleration poses a significant challenge for cyber defenders, who must adapt quickly to close the widening gap.

The report details how AI is transforming cyber threats by enabling attackers to identify vulnerabilities in code and AI systems, customize phishing campaigns at scale, and create tailored malware. Post-compromise activities such as data exfiltration, credential discovery, and lateral movement are also being expedited by AI, significantly shortening the time required for these actions. The report warns that while these methods are not entirely new, the increased scale and speed present an immediate problem for defenders.

The trend is expected to intensify with the rise of autonomous AI attacks, such as the JadePuffer campaign. In response, defenders are urged to invest in AI-powered defenses to match the pace and scale of attackers. The report also underscores the growing complexity of interconnected ecosystems and the critical role of identity security, advocating for phishing-resistant multi-factor authentication (MFA) and strong access controls.

Phishing has surged as an initial attack vector, rising from 7% to 23% of incidents, largely due to AI-generated personalized messages. Exploitation of public-facing applications has also increased. Government agencies were the most targeted sector (27%), followed by IT (17%) and research/academia (14%), with the US experiencing the highest volume of attacks.