CyberWire Daily The New Frontlines of Cybersecurity: Lessons from the 2025 Digital Defense Report [Microsoft Threat Intelligence Podcast]
30 snips
Dec 30, 2025 Crane Hassold, a Principal Security Researcher at Microsoft focusing on cybercrime and threat actors, joins Chloé Messdaghi, Senior Reporting Manager leading the Microsoft Digital Defense Report. They discuss the merging of nation-state operations with cybercrime, revealing that identity compromise is at the heart of 99% of attacks. The conversation delves into AI's dual role in enhancing attacks and bolstering defenses, while also unpacking trends in credential-based assaults and the rise of phishing. Their insights provide a valuable roadmap for organizations navigating today's complex cybersecurity landscape.
AI Snips
Chapters
Transcript
Episode notes
AI Amplifies Scale, Not Magic
- AI is accelerating attacker tradecraft and defender response rather than acting as a single silver-bullet threat or solution.
- The report frames AI as an amplifier of scale and speed, not an automatic game changer on its own.
Attackers Pivot Off Email
- Attackers are shifting from email to alternative messaging channels like SMS, Teams, and WhatsApp to evade long-established detection.
- This pivot reduces defenders' visibility because detection controls on those channels are less mature.
Cybercrime Is Industrialized And Regional
- Cybercrime is industrialized with regionally distinct specialties: Eastern Europe often supplies technical ransomware actors while West Africa drives high-volume social-engineering scams.
- These different ecosystems create specialized roles like mule operators, spam senders, and access brokers.