AI is changing the physics of cybersecurity; Defense has to change with it

Download report Download executive summary

Cybersecurity has always been a contest of time, information, and access. AI is changing all three.

The 2026 Microsoft Digital Defense Report reveals a security environment where attack timelines are compressing, sophisticated capabilities are becoming more accessible, and agentic systems are beginning to automate more of the attack chain. The volume of reported vulnerabilities is also accelerating. Nearly 40,000 CVEs were published in the first half of 2026, putting the year on track to roughly double. And those are only publicly reported vulnerabilities. AI is accelerating vulnerability discovery and compressing portions of the attack chain from days to seconds.

This is one of the factors changing the protection equation. AI is helping researchers and defenders find weaknesses faster, while threat actors are using the same technology to increase the speed and scale of their operations. Taken together, these changes point to something larger than a new set of AI-enabled threats. AI is changing the physics of cybersecurity.

The implications run in both directions. Threat actors are using AI to increase speed, scale, and consistency. Security teams can use many of the same advances to discover risk earlier, correlate signals faster, investigate continuously, and respond at machine speed.

This poses an important question for security leaders: How do we make that shift without losing sight of the fundamentals that remain critical to preventing and containing attacks?

Download the 2026 Microsoft Digital Defense Report executive summary.

Change: Speed, scale, economics, and autonomy

The objectives of most threat actors remain consistent: gain access, establish persistence, steal data, commit fraud, conduct espionage, or disrupt operations.

Throughout the history of cybersecurity, technological advancement has been a major driver of change. In the AI era, that advancement is giving threat actors greater leverage to pursue the same objectives.

Over the past six months, we have seen the threat landscape shift rapidly from AI assisting human operators, to AI directing attack activity, toward autonomous execution. Microsoft Threat Intelligence is seeing AI applied across vulnerability discovery, reconnaissance, phishing, malware and exploit development, data analysis, and post-compromise activity. Attacks are increasingly being automated at scale with limited operator intervention, while frontier systems are demonstrating the ability to carry out complex multi-stage attacks, with one of our evaluations stringing 32 stages together in a controlled environment. We are also observing the emergence of AI-orchestrated activity in the wild.

Vulnerability discovery provides another view into this shift. The data shows that the median time from vulnerability discovery in the wild to weaponization has fallen to well below 24 hours. Enterprise remediation for critical external vulnerabilities, meanwhile, can take 30 to 60 days. That mismatch gives threat actors a widening window to act before exposed systems are fixed.

This doesn’t mean fully autonomous cyberattacks have suddenly become the norm. Most complex real-world intrusions still involve meaningful human direction, but work that once consumed scarce expertise and operator time can increasingly be accelerated, repeated, or delegated to AI. This also applies to the historically costly or research-intensive effort required to discover new zero-day exploits.

At the same time, greater autonomy introduces another emerging risk: model misalignment. As AI systems are given more agency to act, security teams will need to watch closely for cases where models pursue objectives or take actions that diverge from the intent of their operators. That risk becomes increasingly important as AI systems are trusted with greater access, permissions, and autonomy.

New technology is amplifying old paths to compromise

AI does not erase the security lessons of the past decade. In many cases, it makes familiar weaknesses easier to exploit and easier to scale. Microsoft Defender Experts data found that user execution accounted for 30% of observed initial access and valid accounts another 20%.

At Black Hat this year, we described a pattern our research and incident response teams see across software supply chain attacks, identity compromise, cloud intrusion, and emerging AI threats: threat actors follow trust.

They look for software, identities, developer workflows, services, tools, and systems organizations already depend on. A compromised package can become a distribution mechanism. A valid credential can turn malicious activity into something that resembles legitimate use. An AI agent with excessive permissions can create a new path to data, applications, or infrastructure.

Find what is trusted, abuse it, and increase the impact.

That pattern is already operating at significant scale. Between February and early May 2026, Microsoft Defender observed ClickFix-style attacker-supplied commands executed on more than 1.1 million unique devices, roughly an eightfold increase.

That is why the rise of AI should not steal security teams’ focus away from identity, data protection, software security, exposure management, or Zero Trust. It should raise the urgency around each of them.

AI can make a weakness easier to discover, an attack easier to customize, and a campaign easier to scale. It cannot turn a well-governed identity into an overprivileged one or create an exposed service that was never exposed in the first place. The fundamentals still shape the outcome.

More intelligence only matters if security teams can action it

The other side of this shifting environment is a problem security teams already know well: they have more information than ever.

Signals arrive from endpoints, identities, email, cloud infrastructure, applications, vulnerability management systems, and threat intelligence sources. Security teams have the necessary data, but finding the needle in a haystack is the difference between visibility and driving action before a threat actor makes impact.

At Black Hat, we described this as the intelligence-to-action gap. It cannot be closed by adding another feed or dashboard. It closes when intelligence is combined with context to change a decision, and when the organization can turn that decision into action quickly enough to affect the outcome.

The Microsoft Digital Defense Report makes the asymmetry clear: security teams may have to protect thousands of systems, while a threat actor needs to find only one viable path. AI is increasingly helping find that path.

For analysts and hunters, the answer has to be more than processing alerts faster.

Security signals need to be connected with threat intelligence and enterprise context. Intelligence must inform exposure management, detection, hunting, investigation, and response. And as threats move faster, more of that process needs to operate continuously rather than waiting for a person to manually connect every step.

The measure of intelligence should not be how much information a security team receives. It should be whether that intelligence helps the team make better decisions, sooner.

Security has to be continuous

This year’s report points to a security environment defined by persistent pressure, machine-speed operations, and growing interdependence. Defense can no longer be managed as a sequence of isolated incidents.

Organizations need to reduce exposure before an attack begins. That means strengthening identity, limiting privilege, finding internet-facing assets, fixing exposed systems quickly, securing software dependencies, and understanding where sensitive data can be accessed or aggregated. As AI systems and agents enter the environment, those same controls need to extend to their identities, permissions, data, and tools. The need remains grounded in familiar weaknesses. Among detections tied to the five leading CVEs analyzed in the report, 58% were associated with a single vulnerability first disclosed in 2020: CVE-2020-1472.

Exposure management also must become continuous. Asset visibility, vulnerability discovery, threat intelligence, detection, and AI-assisted analysis need to work together so teams can focus on the risks most likely to matter. Success is better measured by exposure reduced and time to mitigation than by patch volume or alert count.

Security teams also need to connect signals across the environment. Endpoint, identity, cloud, application, email, network, data, and AI telemetry become more useful when combined with threat intelligence and enterprise context. Shared context turns visibility into faster investigation and action.

Organizations must also plan for disruption. The question is not only whether an attack can be prevented, but whether the organization can contain harm, continue operating, and recover quickly when prevention fails.

That is the practical response to the shift described throughout the report: get ready for AI by strengthening the foundations, secure AI as it enters the environment, and defend with AI so intelligence and action can keep pace with the threat.

Learn more about how security leaders and CISOs can secure today’s interconnected ecosystem.

Strong foundations, secured AI, and faster defense

AI is changing the physics of cybersecurity. The findings in the 2026 Microsoft Digital Defense Report point to a security environment where both attack and defense are becoming faster, more automated, and more interconnected.

The challenge is increasingly not whether information exists, but whether security teams can identify what matters, connect it to their own environment, and act in time.

As the distance between discovery and attack continues to shrink, defenders need to close the distance between intelligence and action.

Person working on a laptop at a desk with a mobile device placed beside it

Getting started with AI applications

Build a secure foundation for AI applications with a phased approach.

Microsoft Security Data Governance and Security report cover.

Strategies for data governance and security

Practical guidance for aligning data governance and security to help enable scalable AI.

A white line drawing of a paper in an envelope with the word New on a blue background.

Get the CISO Digest

Stay ahead with expert insights, industry trends, and security research in this bimonthly email series.