Microsoft data from the first half of 2026 shows that Switzerland ranked 13th among countries whose customers were most frequently impacted by cyber activity in Europe and 39th globally. Across Europe, Ukraine ranked first, the United Kingdom second and Germany third, while France ranked sixth. At the same time, the latest Microsoft Digital Defense Report (MDDR) points to a rapidly evolving threat landscape shaped by artificial intelligence, identity-based attacks and increasingly interconnected digital ecosystems.
The report identifies three major shifts that organizations need to prepare for: AI is accelerating both attacks and defense, identities have become the primary target for attackers seeking access, and cyber incidents increasingly create consequences that extend beyond the initial victim. Together, these trends are reshaping the way organizations approach cybersecurity and resilience.
“The latest findings show that cyber risks rarely exist in isolation. Attackers increasingly exploit identities and trusted digital connections across organizations, platforms and supply chains,” said Marc Holitscher, National Technology Officer at Microsoft Switzerland. “As organizations accelerate their digital transformation, cybersecurity, resilience and digital sovereignty are becoming inseparable priorities. Those that protect identities, strengthen operational resilience and maintain trust in their digital infrastructure will be better positioned to adapt to an increasingly complex threat landscape.”
Key findings from the Microsoft Digital Defense Report 2026:
- AI is accelerating attacks and defense. Cybercriminals are using AI to operate at greater speed and scale, while defenders are increasingly leveraging AI to identify, investigate and disrupt threats more quickly.
- Identity is the primary way attackers gain access. As attackers target people, accounts and credentials, protecting identities remains one of the most important security priorities for organizations.
- Cyber risks are becoming more interconnected. A compromised account, supplier, platform or service provider can create consequences that extend well beyond a single organization, highlighting the importance of collaboration and information sharing.
- Speed matters. As attackers move faster, organizations need to reduce the time between detection and response and regularly test their incident response capabilities.
- Cyber resilience is becoming a business imperative. Organizations increasingly need to maintain critical operations during disruption and strengthen their ability to recover quickly from incidents.
Microsoft’s unique visibility across the global digital ecosystem helps inform the report’s findings. The company analyzes more than 165 trillion security signals every day, enabling it to identify emerging threats, protect customers and support coordinated action against cybercrime worldwide.
Read the full Microsoft Digital Defense Report 2026: Microsoft Digital Defense Report 2026