There are 19 cyberattacks in the world every second: Russia is a threat leader, according to Microsoft's Cyber Threat Report 2024
In the annual Microsoft Digital Defence Report 2024, the corporation has revealed the main cybersecurity challenges facing governments, businesses and ordinary users. If you suspect that the digital world is becoming less and less secure, you are absolutely right - the report confirms that more than 600 million cyberattacks occur every day (that's 19 attacks every second). The number of attacks continues to grow, and the methods of cybercriminals are becoming more sophisticated.
Here's What We Know
Microsoft notes that the activity of state-sponsored hackers has reached new heights over the past year. In particular, attacks on infrastructure facilities have increased by 40%. Energy, healthcare and government systems remain the main targets. Moreover, there has been an increase in "criminal cyber services" - where criminals sell their skills or access to other groups.
Innovative, albeit undesirable, trends include the use of artificial intelligence to create convincing phishing emails and automate hacking. Microsoft notes that cybercriminals are mastering these technologies faster than defenders can react.
1. Number of attacks:
- Russia: 75% of its attacks targeted Ukraine and NATO countries.
- China: The main focus is on Taiwan and the South China Sea countries.
- Iran: Dramatically increased the number of attacks after the conflict between Israel and Hamas.
- North Korea: Stole more than $600 million worth of cryptocurrency in 2023 alone.
2. Most vulnerable sectors:
- IT (24% of all attacks).
- Education and research (21%).
- Governments (12%).
3. Threat evolution:
Criminals and state-sponsored hackers are using the same tools, such as Xworm, Cobalt Strike, and even hired cybercriminal groups.
Key takeaways
- Artificial intelligence: Already being used to automate attacks, Microsoft is also exploring how to use AI to strengthen defences.
- Infrastructure risks: Critical systems, such as water and energy, have been targeted - especially those with weak defences.
- Phishing and identity theft: QR codes, fake websites and new social engineering techniques are gaining momentum.
How to protect yourself?
Microsoft emphasises that cybersecurity should start with strong passwords, multi-level authentication, and constant system updates. But this is only the beginning. The company is calling for global cooperation to create "red lines" and strengthen international cybersecurity law.
The numbers are impressive, but what's even more surprising is how fast cyberspace is changing. If you haven't implemented two-factor authentication yet, it's time.
Source: Microsoft
