Microsoft: Attackers Lead AI Arms Race

Threat actors are currently extracting more value from artificial intelligence than the defenders trying to stop them, according to Microsoft's 2026 Digital Defense Report. The company's annual security assessment, released this week, describes a cybersecurity landscape where offensive AI is shrinking the time, expertise, and money needed to find and exploit weaknesses, while defensive teams struggle to keep pace. Microsoft's conclusion is blunt: in the near term, attackers are reaching for the advantages of AI first.

Attackers Pull Ahead of Defenders

The report's central finding is that AI is reshaping both offensive and defensive operations, but not at the same rate. Attackers are using the technology to compress the time required for vulnerability discovery, malware development, and post-compromise activity, while security teams are still working to integrate AI into their own workflows. Microsoft says this is not a permanent state, but it is the current one.

"While the equilibrium between attackers and defenders will likely ultimately be re-established, in the near term we are in a period where attackers are reaching to advantages first, and defenders will need to move sharply in order to close the gap," says Microsoft.

That gap is most visible in vulnerability research, where AI-powered discovery tools are surfacing flaws faster than organizations can patch them. Microsoft describes remediation as inherently slower than discovery, a mismatch that creates a backlog of known but unpatched vulnerabilities.

Remediation Can't Keep Up

Microsoft warns that many systems lack the robust unit and integration testing needed to deploy code changes rapidly, which means even when a vulnerability is identified, fixing it can take far longer than finding it. The result, according to the report, is a multi-year period in which the number of known but unpatched vulnerabilities spikes.

"However, remediation is inherently much slower than discovery, not least because many systems lack robust unit and integration testing and so cannot deploy code changes rapidly," warns Microsoft.

The company adds that "well-prepared and well-funded adversaries may be able to stockpile large numbers of zero-day vulnerabilities discovered through such means." That stockpiling potential raises the stakes for organizations that rely on patching cycles to stay ahead of exploitation.

Microsoft also reports that the median time between vulnerability discovery in the wild and weaponization has fallen well below 24 hours, leaving organizations with very little time to patch exposed systems before they are attacked.

From Days to Minutes

Beyond vulnerability research, Microsoft says attackers are using AI to generate customized malware and accelerate post-compromise activities. Tasks such as data exfiltration, secret discovery, and lateral movement that once took days can now be completed in minutes. AI also helps threat actors automate larger portions of an attack chain with limited human intervention, while giving less experienced cybercriminals access to capabilities that previously required more skill.

The report notes that AI can give criminal groups capabilities once associated with more sophisticated threat actors, like state-sponsored hackers. For sophisticated actors, Microsoft says, AI allows unprecedented speed, scale, and customization, reducing the attack chain from days to seconds. For less-sophisticated actors, AI-powered scaling makes accessible the sort of attack persistence that was previously the sole domain of intelligence agencies, and the ability to customize attacks, especially social engineering attacks for phishing and fraud, is likely to increase attack success rates.

State Actors Embrace AI

Microsoft says nation-state threat actors have already started to use AI in real-world operations, using it to speed up research, malware development, social engineering, and other parts of an attack. Some Chinese state-sponsored actors now use AI tools to search for vulnerabilities and learn how to exploit them, while still relying on phishing and remote access trojans.

Microsoft has also seen Russian state-sponsored threat actors using "vibe coding" and AI-generated tooling to speed up and power their attacks. According to the report, North Korean remote IT workers are using AI for persona development, social engineering, and maintaining access to organizations. Other North Korean threat actors use it to create malware and manage attack infrastructure. Microsoft says some of these hackers have also used agentic workflows and LLM-generated code to accelerate malware deployment.

Those campaigns are similar to those previously reported North Korean state-linked campaigns. In January, BleepingComputer reported that the North Korean Konni hacking group was using AI-generated PowerShell malware to target blockchain developers and engineers. BleepingComputer has also reported on North Korean fake IT worker operations that used AI, including deepfake video, to create convincing personas and get hired by Western companies.

Not Yet Fully Autonomous

While AI has become a powerful tool for speeding up the creation and conducting of attacks, Microsoft cautions that cyberattacks have not yet become fully autonomous. The company says most real-world campaigns still rely on humans to select targets, make decisions, and handle complex parts of an attack.

"Most observed campaigns still retain human direction, even as frontier systems demonstrate end-to-end autonomy in labs and early real-world cases," says Microsoft.

That caveat matters for defenders evaluating how quickly they need to adapt. The report does not claim that AI has replaced human operators, but it does argue that AI has changed the economics of attack. Reducing the cost and expertise required to launch sophisticated campaigns means more actors can attempt them.

The Defensive Gap

Microsoft's report frames the current moment as a period of imbalance rather than a permanent shift. The company believes defenders will eventually gain similar benefits from AI, but the interim period is one where attackers hold the advantage. Closing that gap will require defenders to move sharply, according to the report, though Microsoft does not specify a timeline for when the equilibrium might be restored.

The report's warning about a multi-year spike in unpatched vulnerabilities suggests that organizations should expect a sustained period of elevated risk, particularly if adversaries can stockpile zero-days discovered through AI-assisted research. For defenders, the challenge is not just adopting AI tools but doing so quickly enough to offset the speed advantages attackers already have.

Implications for Organizations

Microsoft's findings suggest that the patch-and-pray approach many organizations rely on is becoming less viable. If the median time from vulnerability discovery to weaponization is now under 24 hours, security teams have less than a day to act on critical flaws, a window that is difficult to meet without automated patching and robust testing pipelines. The report's note that many systems lack such pipelines points to a structural weakness that AI alone cannot fix.

The report also indicates that AI is lowering the barrier to entry for less-skilled attackers, which could mean a broader pool of adversaries attempting campaigns that were once the domain of state-sponsored groups. For businesses, that translates to a wider range of threats to defend against, including more customized social engineering attacks.

At the same time, Microsoft's assessment that attacks are not yet fully autonomous suggests that human decision-making remains a critical part of the attack chain, which could offer defenders opportunities to disrupt campaigns at key points. The report does not detail specific defensive measures, but its emphasis on speed and remediation suggests that organizations should prioritize reducing the time between discovery and patch deployment.

Ultimately, Microsoft's 2026 Digital Defense Report describes a transitional period in which attackers are first to leverage AI. Whether defenders can close the gap quickly depends on how fast they can integrate AI into their own operations and address the underlying remediation bottlenecks the report highlights.