9 Essential Insights from the Microsoft Digital Defense Report 2023

The article outlines 9 key insights from the 2023 Microsoft Digital Defense Report, including topics such as basic security practices, ransomware trends, password attacks, BEC incidents, nation-state targeting, IoT/OT vulnerabilities, AI-powered cyberattacks, and supply chain risks.
CATEGORIES:
SHARE THIS BLOG:
  1. 99% of attacks can be prevented by basic security hygiene:
Implementing fundamental security practices such as enabling MFA, applying Zero Trust principles, using XDR and antimalware, keeping systems up to date, and protecting data can prevent most cyberattacks.
Basic security hygiene still protects against 99 of attacks_Microsoft Digital Defence Report 2023
  1. Human-operated ransomware attacks increasing:
Ransomware attacks have tripled since September 2022, and are often carried out by human operators who exploit remote access vulnerabilities.
Human operated ransomware attacks increasing_Microsoft Digital Defence Report 2023
  1. Password attacks are soaring:
Password spray and brute force attacks have increased by 300% and 250% respectively in 2023, as attackers take advantage of remote work and cloud services. Password less authentication and identity protection are essential to stop these attacks.
Password attacks dramatically rise Microsoft Degetal Defence Report 2023
  1. Business Email Compromise (BEC) reaches a new peak:
BEC phishing targets specific people in an organization, often pretending to be executives or trusted partners, and tries to trick them into sending money or information. BEC attacks have increased by 250% in 2023, and the average loss per incident was over $75,000. BEC attacks have increased by 250% in 2023, and the average loss per incident was over $75,000.
Business Email Compromise BEC at an all time high Microsoft Digital Defence Report 2023
  1. Nation-state actors target a wider range of sectors and organizations:
Nation-state actors are not only attacking governments and critical infrastructure, but also healthcare, education, media, and NGOs. Microsoft tracked 16 nation-state groups in 2023 and saw over 35,000 attacks from these groups.
Nation state threat actors global target set expands Microsoft Digital Defense Report 2023
  1. Nation-state actors combine cyberattacks and influence operations:
Some nation-state actors are using both cyberattacks and influence operations to achieve their goals, such as interfering with elections, spreading false information, or undermining trust in institutions. Microsoft detected and disrupted several such campaigns in 2023, and shared threat intelligence with customers and partners.
  1. IoT/OT devices increasingly at risk:
Internet of Things (IoT) and Operational Technology (OT) devices are becoming more prevalent and connected, but also more vulnerable to cyberattacks. Microsoft observed a 35% increase in IoT/OT attacks in 2023 and identified several new malware families targeting these devices.
IoT devices increasingly at risk Microsoft Digital Defence Report 2023
  1. AI-powered cyberattacks are becoming more sophisticated:
AI is transforming cybersecurity, but also enabling advanced forms of cyberattacks. Microsoft found several examples of AI-powered attacks in 2023, such as deepfake audio and video, generative adversarial networks, and machine learning poisoning.
AI and large language models (LLMs) will transform cybersecurity_Microsoft Digital Defence Report 2023
  1.  Supply chain attacks pose a systemic risk:
Supply chain attacks are those that compromise a trusted third-party vendor or service provider and use their access or products to target their customers or partners. Microsoft witnessed several high-profile supply chain attacks in 2023, such as SolarWinds, Kaseya, and Codecov, which affected thousands of organizations worldwide.
We hope you enjoyed reading the insights shared above! For more insights like this, be sure to subscribe to our Email Insights or LinkedIn Newsletter.

If you are looking for Microsoft’s cybersecurity assistance or consultancy, we would be more than happy to assist you! Feel free to reach out to us via email (info@penthara.com) or schedule a free 30 min call at your convenience.
Jasjit Chopra
Jasjit Chopra

CEO at Penthara Technologies

About the Author

Microsoft MVP LogoLinked-in

Jasjit Chopra is the CEO of Penthara Technologies and a Microsoft Most Valuable Professional (MVP) with over two decades of hands-on experience in Microsoft 365, SharePoint, and Security. He has led 100+ digital transformation projects across six countries, securing 50,000+ users, migrating 250+ TB of data, and automating processes that save organizations thousands of hours each year. A recognized leader at the crossroads of AI, security, and workplace modernization, Jasjit is passionate about simplifying complexity, mentoring technology professionals, and helping businesses build secure, intelligent, and future-ready digital environments.

Leave a Reply

Your email address will not be published. Required fields are marked *

More From This Category

Protecting Company Data on BYOD Devices with Intune

Learn how to protect company data on BYOD devices with Microsoft Intune, using app protection policies, Conditional Access, MAM, and selective wipe.

Read More
How to Block Unsafe Websites on Work Devices

Protect work devices from phishing, malware, and risky web content by using Microsoft Defender and Intune to block unsafe websites across your organization.

Read More
Security Alerts That Nobody Investigates - And Why That’s More Dangerous Than Having None

Security alerts mean nothing if no one investigates them. Ignored alerts create false confidence - and give attackers the time they need to cause real damage.

Read More
1 2 3
chevron-right