AI-Driven Cyber Attacks Surge, Microsoft Reports

• •AI is enabling faster vulnerability discovery and exploitation, with weaponization times under 24 hours.
• •Phishing attacks have surged from 7% to 23% of intrusions, aided by AI's personalization capabilities.
• •State actors are increasingly using AI for cyber operations, complicating the threat landscape.

Microsoft's 2026 Digital Defense Report reveals that threat actors are leveraging AI to accelerate the discovery and exploitation of vulnerabilities, with the median time from vulnerability discovery to weaponization dropping below 24 hours. The report indicates that the number of tracked CVEs for 2026 is expected to reach a record 72,000. Phishing attacks have risen significantly, from 7% to 23% of intrusions, while exploits against public-facing applications increased from 15% to 24%. State actors from China, Russia, and North Korea are reportedly using AI for various malicious activities, including vulnerability discovery and malware creation. The report highlights the challenges defenders face in keeping up with the rapid pace of AI-enhanced attacks, leading to a backlog of unpatched vulnerabilities. Notably, the s1ngularity malware has been identified as a significant threat, having leaked thousands of sensitive files from numerous victims.