Microsoft: AI Cuts Post-Compromise Attack Time to Minutes

### Executive summary: Microsoft’s Digital Defense Report 2026 warns that AI is compressing parts of the cyber-attack lifecycle from days to minutes by enabling automated vulnerability discovery, large-scale personalized phishing, custom malware generation, and accelerated post-compromise actions; telemetry shows phishing as initial access rose from 7% to 23% and exploitation of public-facing apps from 15% to 24%, with government organizations the most-targeted sector. The report recommends investing in AI-driven defenses, stronger identity controls (phishing-resistant MFA, tiered admin, privileged access enforcement), and highlights the emergence of autonomous AI-driven campaigns such as JadePuffer.