Sign in Subscribe
Cyberterrorism

Cyber Threats on the Rise: Microsoft's 2025 Digital Defense Report

Strategic Insights

— 1 min read

Cybercriminals and nation-state actors are increasingly leveraging AI, automation, and off-the-shelf tools to expand their operations, making them a universal threat that affects everyone, regardless of size or industry. Critical services, such as hospitals and governments, are prime targets due to their sensitive data and limited cybersecurity capabilities. Nation-state actors are also expanding their operations, with China, Iran, and Russia being top players. The use of AI has accelerated malware development and phishing attacks, making them more realistic and efficient. Meanwhile, password attacks remain a significant threat, with over 97% of identity attacks being password attacks. However, implementing phishing-resistant multifactor authentication (MFA) can stop over 99% of these attacks. The Microsoft Digital Crimes Unit is fighting back against infostealer malware, which is used to gather credentials and information about online accounts.

Key Takeaways:

  • Nation-state actors are expanding their operations, with China, Iran, and Russia being top players.
  • Critical services, such as hospitals and governments, are prime targets due to their sensitive data and limited cybersecurity capabilities.
  • Password attacks remain a significant threat, with over 97% of identity attacks being password attacks.
  • Using phishing-resistant multifactor authentication (MFA) can stop over 99% of password attacks.
  • Infostealer malware is being used to gather credentials and information about online accounts.
  • The use of AI has accelerated malware development and phishing attacks, making them more realistic and efficient.
  • Microsoft's Digital Crimes Unit is fighting back against infostealer malware.
  • Nation-state actors are increasingly leveraging the cybercriminal ecosystem for their attacks.
  • The shift by nation-state actors to further leveraging the cybercriminal ecosystem will make attribution even more complicated.
  • Organizations must stay vigilant and continually update their defenses to combat the growing sophistication of cyber threats.

Statistics:

  • Attacks driven by financial gain accounted for at least 52% of incidents last year.
  • More than 97% of identity attacks are password attacks.
  • Identity-based attacks surged by 32% in the first half of 2025.
  • Password attacks are the largest cause of identity-based attacks, accounting for over 96% of all identity attacks.
  • AI has accelerated malware development and phishing attacks, making them more realistic and efficient.
  • Microsoft processes more than 100 trillion signals daily, blocks approximately 4.5 million new malware attempts, analyzes 38 million identity risk detections, and screens 5 billion emails for malware and phishing.

Sources:

  • Microsoft Digital Defense Report 2025
  • Igor Tsyganskiy, Chief Information Security Officer at Microsoft
  • Capital FM
  • AllAfrica Global Media (allAfrica.com)

Read more