Microsoft's 2026 defense report says cross-system intrusions become clearer when signals are joined

Microsoft's wording sets the confidence level. Signals from separate systems "become more useful when they can be considered together," the company wrote, and threat activity spanning several systems "may leave a pattern that no individual source shows on its own" ^[12][4]. Those passages do not say how many intrusions Microsoft's teams caught only by joining sources. The idea that layer-by-layer monitoring misses attacks is plausible. In this post it is Microsoft's judgement, stated with a "may."

On the attacker side, the change is speed and tailoring. According to the report, AI makes social engineering more targeted and automation compresses parts of the technical work, but the underlying methods are often familiar ^[8]. The disciplines Microsoft says still apply are identity and authorization, data protection, least privilege, monitoring, testing and secure software development ^[16].

Agents add a new kind of identity to defend. A model's security depends on the data it can reach, the tools it can use, and the identities and permissions involved, Microsoft wrote ^[17]. The report examines agent identity, appropriate access, authentication between agents, attribution and the ability to revoke access ^[14]. It also covers prompt injection, memory, models and data, and agent behavior ^[15]. In an incident, attribution and revocation are the two a responder needs first: tracing what an agent did on injected instructions, then cutting its access ^[14][15].

The company treats AI-driven vulnerability discovery as a tool for both sides and calls it "an important area to watch as capabilities develop" ^[7][10].

The correlation case assumes the data can be joined. Security teams hold information from endpoints, identities, cloud environments, applications, email, networks and threat intelligence, Microsoft says ^[11]. A defender sees a cross-system pattern only if those sources can be queried together. The report is Microsoft's annual look across what its security and threat intelligence teams observe ^[1]. It describes threat actors folding AI into existing tradecraft, which on this evidence is a sustained trend across actors and not a single campaign ^[5].