[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fk3YQZUetptKZCpUPZBHKK9SfXx89su9Wolnbe5vjCOs":3},{"article":4,"iocs":39,"watch_terms":40,"solutions":41,"lesson":131},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"a46211c9-3e3d-4c86-9abf-3e3304c3c04a","Insights from the 2026 Microsoft Digital Defense Report","insights-from-the-2026-microsoft-digital-defense-report-4c01af","Read highlights from the 2026 Microsoft Digital Defense Report, which reflects a security environment that continues to grow more interconnected. The post Insights from the 2026 Microsoft Digital Defense Report appeared first on Microsoft Security Blog.","Microsoft's 2026 Digital Defense Report reveals an increasingly interconnected security landscape where AI is being integrated by threat actors for reconnaissance, social engineering, and exploit development. The report also emphasizes the need to secure AI systems as part of broader enterprise environments, focusing on aspects like agent identity, access control, and specific AI security considerations such as prompt injection.","Microsoft's 2026 Digital Defense Report highlights AI's growing role in cyber threats and defense.","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002F2026\u002F10\u002F01\u002Finsights-from-the-2026-microsoft-digital-defense-report\u002F","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fblog\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002FMicrosoft-Digital-Defense-Report.jpg","2026-10-01T14:00:00+00:00","2026-10-01T16:00:12.858245+00:00",7,[17,20,23],{"name":18,"type":19},"Microsoft Digital Defense Report","product",{"name":21,"type":22},"Microsoft","vendor",{"name":24,"type":25},"AI","technology","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":26,"icon":28,"name":29,"slug":30},null,"Threat Intelligence","threat-intelligence",[32,37],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},[],[21,18],{"controls":42,"vendors":127},[43,71,99],{"slug":44,"name":45,"problem":46,"products":47},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[48,56,63],{"vendor_slug":49,"vendor_name":50,"vendor_logo":51,"product_slug":52,"product_name":53,"url":54,"description":55},"beyondtrust","BeyondTrust","\u002Fvendor-logos\u002Fbeyondtrust.png","password-safe","BeyondTrust Password Safe","https:\u002F\u002Fwww.beyondtrust.com\u002Fproducts\u002Fpassword-safe","Privileged password and session management.",{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":44,"product_name":60,"url":61,"description":62},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"slug":72,"name":73,"problem":74,"products":75},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"vendor_slug":93,"vendor_name":21,"vendor_logo":94,"product_slug":95,"product_name":96,"url":97,"description":98},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"slug":36,"name":100,"problem":101,"products":102},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[103,111,119],{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",[128],{"slug":93,"name":21,"logo_path":94,"roles":129},[130],"reported_by",{"slug":132,"title":133,"body":134,"framework_refs":135,"framework_notes":149},"ai-powered-threats-demand-proactive-defense-and-secure-ai-integration","AI-Powered Threats Demand Proactive Defense and Secure AI Integration","Microsoft's 2026 Digital Defense Report highlights that threat actors are now actively leveraging AI to enhance reconnaissance, craft more convincing social engineering attacks, and accelerate exploit development — lowering the barrier to entry for sophisticated attacks. At the same time, enterprises rushing to adopt AI systems are introducing new attack surfaces, including insecure agent identities, overprivileged access, and prompt injection vulnerabilities. This dual threat means organizations must defend against AI-enhanced attacks while simultaneously securing their own AI deployments. Failing to address either side of this equation exposes enterprises to both traditional and novel attack vectors. The convergence of AI offense and defense makes continuous security education and proactive architecture reviews more critical than ever.",[136,137,138,139,140,141,142,143,144,145,146,147,148],"CIS Control 3 – Data Protection","CIS Control 5 – Account Management","CIS Control 14 – Security Awareness and Skills Training","CIS Control 16 – Application Software Security","NIST AI RMF – GOVERN 1.1, MAP 1.5, MEASURE 2.5","NIST SP 800-53 AC-2 – Account Management","NIST SP 800-53 SI-10 – Information Input Validation","NIST SP 800-53 AT-2 – Literacy Training and Awareness","NIST CSF 2.0 – ID.RA (Risk Assessment), PR.AT (Awareness and Training)","OWASP LLM Top 10 – LLM01 Prompt Injection, LLM06 Sensitive Information Disclosure","MITRE ATLAS – Reconnaissance via AI-Assisted Techniques","ISO\u002FIEC 42001 – AI Management System Standard","GDPR Article 25 – Data Protection by Design and by Default",{"CIS Control 3 – Data Protection":150,"CIS Control 5 – Account Management":151,"NIST SP 800-53 AC-2 – Account Management":152,"ISO\u002FIEC 42001 – AI Management System Standard":153,"CIS Control 16 – Application Software Security":154,"NIST AI RMF – GOVERN 1.1, MAP 1.5, MEASURE 2.5":155,"NIST SP 800-53 SI-10 – Information Input Validation":156,"NIST SP 800-53 AT-2 – Literacy Training and Awareness":157,"CIS Control 14 – Security Awareness and Skills Training":158,"MITRE ATLAS – Reconnaissance via AI-Assisted Techniques":159,"GDPR Article 25 – Data Protection by Design and by Default":160,"NIST CSF 2.0 – ID.RA (Risk Assessment), PR.AT (Awareness and Training)":161,"OWASP LLM Top 10 – LLM01 Prompt Injection, LLM06 Sensitive Information Disclosure":162},"Data protection controls govern what data can be fed into AI systems.","Account management covers AI service accounts and API keys, which attackers target.","Account management covers controlling access to AI services.","An AI management system governs secure AI adoption.","Secure development covers AI integrations, such as handling untrusted inputs.","AI risk management functions help organisations govern and test AI adoption.","Input validation helps protect AI integrations from prompt injection.","Awareness training covers AI-enabled phishing and deepfakes.","Training helps staff spot AI-enhanced social engineering.","Describes how attackers use AI, informing defensive planning.","Privacy by design applies to AI systems that process personal data.","Risk assessment and training address both AI-enabled threats and AI adoption risks.","Covers prompt injection and data disclosure risks in enterprise AI systems."]