AI cybersecurity challenges are growing as attackers use artificial intelligence to find vulnerabilities, produce malware and expand phishing campaigns, according to the 2026 Digital Defense Report. Covering the period from July 2025 to June 2026, the findings ranked Indonesia 24th globally and 10th in Asia Pacific in terms of how frequently customers encountered observed cyber threat activity.
Key takeaways
- AI accelerates attacks while also supporting threat detection and response.
- BSSN recorded around 3.13 billion potential cyber threats by October 2026.
- The report places operational resilience among leadership responsibilities.
Microsoft said in its 2026 Digital Defense Report that increasingly connected identities, cloud services, software supply chains and critical infrastructure are expanding cyber risks. Attack methods and targets remain largely unchanged, but AI is making attacks faster, more scalable and more effective.
AI cybersecurity challenges extend beyond faster attacks
AI helps attackers discover weaknesses, generate malware and conduct phishing, social engineering and online fraud at scale. For advanced attackers, it can compress attack chains that previously took days into seconds, the report says.
AI systems are also targets, including their supporting data and infrastructure. Attackers exploit user accounts and credentials to enter trusted systems, while vulnerabilities in connected software and infrastructure can affect multiple organizations.
The report’s Threat Intelligence figures show that 63% of global intrusions involved data theft. It also records more than 46 million business email impersonation attacks. User execution, valid accounts, social engineering or phishing featured in 73.3% of initial access attempts.
The same technology can strengthen defense. AI-assisted analysis and automation help identify vulnerabilities, detect threats, speed up investigations and automate responses. The report emphasizes that human security professionals must work alongside these systems to maintain protection and business continuity.
Indonesia’s threat figures show the scale of exposure
According to Indonesia’s National Cyber and Encryption Agency, BSSN, potential cyber threats increased by more than 700% in 2025 relative to the 2019–2024 timeframe. Media Indonesia, cited in the source, reported approximately 174 potential threats detected per second for that comparison.
BSSN’s tally reached approximately 3.13 billion potential cyber threats by October 2026, equivalent to a rate of 133 per second, and these domestic figures sit alongside the report’s global and Asia Pacific rankings for Indonesia, which are based on observed activity spanning July 2025 through June 2026.
Cyber resilience moves into leadership decisions
The report treats cyber resilience as a strategic leadership responsibility, rather than a task confined to IT teams. Organizations must protect critical systems while ensuring that services continue operating during disruption.
Its cyber resilience strategies for Indonesian organizations address five priorities:
- Identity protection: Embed security in leadership decisions, adopt passkeys and phishing-resistant multifactor authentication, and restrict access to necessary privileges.
- AI and data governance: Track AI applications and agents, including unapproved services, protect sensitive information and apply authorization-based access controls.
- Reduced internet exposure: Identify exposed assets, prioritize network-device security updates, and strengthen authentication and activity monitoring.
- Security readiness: Run attack simulations for cloud services, business applications and critical-data systems; use trusted software, monitor dependencies and prepare rapid responses to vulnerabilities.
- Collaboration: Exchange threat intelligence with trusted partners and relevant authorities to enable a coordinated response to incidents.
Long-term preparation includes cryptography and AI governance
The report recommends building a cryptographic inventory and advancing post-quantum planning alongside AI governance. It pairs these preparations with stronger control over data and identities as organizations address AI cybersecurity challenges.
Its measure of cybersecurity success extends beyond preventing attacks: organizations must withstand disruption, adapt, recover quickly, keep operating and preserve trust.
Article produced with the assistance of artificial intelligence and reviewed by the editorial team.