Microsoft Digital Defense 2026 Report Highlights New Cybersecurity Challenges Amid ...

The Microsoft Digital Defense Report 2026 showcases how AI is accelerating cyberattacks and expanding risks to identities, data, and digital infrastructure, underscoring the importance of strengthening cyber resilience as digital ecosystems become increasingly interconnected.

Microsoft’s 2026 Digital Defense Report reveals that cyber threats are becoming more complex as AI adoption grows and digital identities, cloud services, software supply chains, and critical infrastructure become increasingly interconnected. Based on findings from July 2025 to June 2026, Indonesia ranked 24th globally and 10th in Asia Pacific among countries where customers were most frequently affected by observed cyber threat activity.

According to Indonesia’s National Cyber and Encryption Agency (BSSN), as cited by Media Indonesia, potential cyber threats in Indonesia increased by more than 700% in 2025 compared with the 2019–2024 period, with approximately 174 potential threats detected per second. By October 2026, BSSN had recorded around 3.13 billion potential cyber threats, averaging 133 per second. 1 These figures underscore the importance of being prepared to address increasingly complex cyber risks as reliance on AI and digital services grows.

“As AI advances rapidly, cybersecurity is no longer just protection. It is an essential foundation that empowers organizations to innovate and adopt AI with greater confidence. AI holds tremendous potential to drive progress in Indonesia, but realizing that potential requires trust that systems, data, and identities are protected. With strong security foundations, organizations can make the most of AI opportunities responsibly and sustainably,” said Gunawan Susanto , Managing Director , Microsoft Indonesia .

The Threat Landscape in 2026: Attacks Accelerate with Widen Impacts

This year’s report identifies four key trends shaping the cyber threat landscape. While attackers’ methods and targets have remained largely unchanged, AI and increasingly interconnected digital systems are making attacks faster, more scalable, and more effective.

AI is accelerating attacks while creating new security risks . Attackers are increasingly using AI to identify vulnerabilities, generate malware, and conduct phishing and online fraud at scale. At the same time, AI systems themselves are becoming targets, including the data and infrastructure supporting them.

Digital identities are increasingly becoming an entry point for cyberattacks. Attackers are targeting user accounts and credentials to gain unauthorized access, then using that access to reach other systems or data.

Risks are spreading through interconnected software and infrastructure. Open-source software, edge devices, cloud identities, and operational technology are being attacked more frequently. The connections between systems mean that a single vulnerability can affect multiple organizations, including through software supply chains and essential services.

Cyber resilience is becoming a strategic leadership responsibility. The relentless pace of attacks means organizations must look beyond prevention to ensure that critical systems and services can continue operating during disruption. Cyber resilience is therefore a priority for organizational leaders, not just IT teams.

These trends are reflected in Microsoft Threat Intelligence data, which shows that globally, 63% of intrusions involved data theft . Identity-based threats are also increasingly prominent, with more than 46 million business email impersonation attacks detected. In addition, 73.3% of initial access attempts involved user execution, valid accounts, social engineering, or phishing. These findings illustrate how attackers exploit security weaknesses and users’ trust to gain access to critical systems and data.

How AI is Changing Cyber Attacks and Defense

AI is shifting the speed, scale, and sophistication of cyberattacks. It enables attackers to discover vulnerabilities, generate malware, and conduct phishing and social engineering at scale and with greater precision. For advanced attackers, AI can even reduce attack chains that previously took days into seconds. At the same time, digital identities and trusted systems are increasingly being targeted.

Yet AI also creates opportunities to strengthen cyber defense. Through analysis and automation, AI can help organizations identify vulnerabilities, detect threats, accelerate investigations, and automate security responses. Microsoft’s report also emphasizes the importance of human security professionals working alongside AI systems to keep pace with faster-moving attacks, strengthen protection, and maintain business continuity.

From Prevention to Cyber Resilience: Practical Tips for Tackling Cyber Threats

Cybersecurity nowadays is not just preventing attacks. It is also ensuring that organizations can continue operating, recover quickly, and maintain trust when disruptions occur. Here are five priorities organizations in Indonesia can adopt to strengthen digital resilience:

Make cybersecurity and identity protection a priority. Embed cybersecurity into strategic decision-making at leadership level. Strengthen identity protection with passkeys, phishing-resistant multifactor authentication (MFA), and least-privilege access to reduce the risk of credential abuse.

Strengthen AI and data governance. Maintain visibility and control over the use of AI applications and agents, including services that have not been formally approved. Protect sensitive data and apply access controls based on organizational needs and authorization levels.

Reduce exposure across internet-facing systems. Identify potentially exposed digital assets, prioritize security updates for network devices, and strengthen authentication and activity monitoring to reduce opportunities for attacks.

Test security readiness and secure software dependencies. Conduct regular attack simulations, particularly for cloud services, business applications, and systems handling critical data. Use software from trusted sources, monitor its components and dependencies, and prepare rapid response measures when vulnerabilities are found.

Build collaboration and long-term readiness. Strengthen threat intelligence sharing with trusted partners and relevant authorities to support coordinated incident response. Prepare for technological advances by building a cryptographic inventory and advance post-quantum planning alongside AI governance.

Cyber Resilience as the Foundation of Digital Trust

The report reinforces that cybersecurity is no longer defined solely by the ability to prevent attacks, but by an organization’s capacity to withstand disruption, adapt, and recover quickly. For Indonesia, as AI, cloud, and interconnected digital services gain wider adoption, cyber resilience is essential to maintaining trust, ensuring service continuity, and supporting sustainable digital transformation. By strengthening security governance, protecting identities and data, and fostering cross-sector collaboration, organizations can build a more resilient digital ecosystem where innovation can advance securely and deliver value to Indonesian society and the economy.

Ultimately, cybersecurity success should be measured not only by the ability to prevent attacks, but also by an organization’s ability to keep operating and preserve trust when disruption occurs.

Explore more findings and cybersecurity recommendations in the full Microsoft Digital Defense Report 2026 here .

1 Media Indonesia, “Indonesia Dikepung 3,13 Miliar Ancaman Siber,” 7 Oktober 2026.