Microsoft 2026 Digital Defense Report: AI Accelerates Attackers

1. 12:14
   X @AISecHub

   Microsoft releases 2026 Digital Defense Report

   Microsoft 发布了 2026 数字防御报告（2026 Digital Defense Report），相关 PDF 文档已公开。来源：X @AISecHub。

1. 20:47
   Help Net Security AI

   Microsoft 2026 Digital Defense Report: attackers gain the upper hand with AI

   Microsoft's "2026 Digital Defense Report" covers July 2025 to June 2026 and notes that attackers are gaining AI benefits ahead of defenders. The median time from in-the-wild discovery of a vulnerability to weaponization has dropped to under 24 hours, with 2026 CVE counts projected to reach a record 72,000, while remediation speed cannot keep up; Microsoft expects known unpatched vulnerabilities to accumulate for years. Phishing's share of intrusions investigated by Microsoft's incident response team rose from 7% a year ago to 23%, and exploitation of vulnerabilities in public-facing applications rose from 15% to 24%. The report also mentions that the s1ngularity malware, spread through a poisoned Nx npm package, looks for and runs Claude Code, Gemini CLI, or Amazon Q CLI on infected machines to hunt for secrets, leaking about 2,000 secrets and about 20,000 files involving 225 victims; the PromptLock ransomware prototype carries only a prompt and, at runtime, fetches Lua scripts from an open-weight model on attacker infrastructure.

1. 22:00
   网页Microsoft Security· Discussion

   Insights from the 2026 Microsoft Digital Defense Report(opens the original post in a new tab)

Current attention53·Peak in the comparable period56（Oct 8 13:00）·Change over the comparable past 24 hours -4%