Preparing governments for an era of interconnected cyber risk
Microsoft reports government agencies targeted in 27% of cyber threats in 2026, up from 17% in 2025.
According to Microsoft's 2026 Digital Defense Report, government agencies and services were the most impacted sector by cyber threats, accounting for 27% of observed activity and remaining primary targets for nation-state operations. The report highlights that phishing attacks accounted for 23% of intrusions (up from 7% in 2025), dwell times increased across sectors, and attackers increasingly mimic legitimate activity to evade detection. Microsoft recommends governments prioritize five resilience areas: preparing for faster threat environments, building security into AI ecosystems, planning for incident spread, strengthening identity and access controls, and establishing public-private partnerships.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Microsoft?
Get an email when a new story names Microsoft, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonGovernment agencies accounted for 27% of all observed cyber threat activity, making them the most targeted sector globally, with phishing attacks tripling from 7% to 23% of intrusions in a single year. Attackers are increasingly mimicking legitimate user behavior to extend dwell times and evade detection, meaning traditional signature-based defenses are insufficient. The rise of nation-state operations targeting public sector infrastructure highlights that governments must treat cybersecurity as a strategic resilience issue, not merely an IT problem. Failure to act compounds risk across interconnected public services, where a breach in one agency can cascade into widespread societal disruption.
What helps against this
How we list vendors
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Automated patch management
Known holes get closed in days, not months.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.