Ukraine 3rd in world for recorded cyberattacks - Microsoft

Ukraine ranks third worldwide and first in Europe for being targeted by cyberattacks, according to Microsoft's Digital Defense Report 2026. The report reveals that Ukraine accounted for 4.8% of all victims globally, surpassing only the United States and Israel. The nation continues to be a primary target of Russian state actors, responsible for 14% of their recorded activities.

Government institutions and services were the most affected sector, with 27% of recorded activity, a significant increase from 17% in 2025. This surge in attacks is attributed to the valuable information these entities store, the critical services they maintain, and their central role in the network of agencies, contractors, technology providers, and infrastructure operators.

Phishing methods accounted for 23% of recorded intrusions in 2026, up from 7% in 2025, highlighting the continued reliance on compromised credentials as a primary means of intrusion. In 52.2% of cases involving valid accounts, attackers expanded their access by stealing additional credentials. The report underscores the rapid escalation of attacks, with AI enabling breaches to be exploited within 24 hours of the initial vulnerability detection.

Microsoft expects the number of publicly disclosed software vulnerabilities (CVEs) to reach 72,000 this year. AI also introduces new challenges, as attackers increasingly use AI tools while organizations grapple with its integration into security operations. The pace of attacks has accelerated, requiring AI assistance to counteract the continuous, machine-speed operations of cybercriminals.

Nataliia Burlakova, Microsoft Security Sales and Engineering Lead, recommends incorporating AI governance, credential protection, and the principle of least privilege into security strategies to address these evolving threats.