CyberWire Daily The New Frontlines of Cybersecurity: Lessons from the 2025 Digital Defense Report [Microsoft Threat Intelligence Podcast]
42 snips
Dec 30, 2025 Crane Hassold, a Principal Security Researcher at Microsoft focusing on cybercrime and threat actors, joins Chloé Messdaghi, Senior Reporting Manager leading the Microsoft Digital Defense Report. They discuss the merging of nation-state operations with cybercrime, revealing that identity compromise is at the heart of 99% of attacks. The conversation delves into AI's dual role in enhancing attacks and bolstering defenses, while also unpacking trends in credential-based assaults and the rise of phishing. Their insights provide a valuable roadmap for organizations navigating today's complex cybersecurity landscape.
AI Snips
Chapters
Transcript
Episode notes
Cybercrime Is Industrialized And Regional
- Cybercrime is industrialized with regionally distinct specialties: Eastern Europe often supplies technical ransomware actors while West Africa drives high-volume social-engineering scams.
- These different ecosystems create specialized roles like mule operators, spam senders, and access brokers.
Enable MFA Everywhere
- Protect identity aggressively by enabling multi-factor authentication across accounts.
- Chloé Messdaghi notes MFA prevents roughly 99% of observed identity-based attacks.
Old Breaches Become New Fuel
- Large historical breach datasets gain new value because AI/LLMs make searching and extracting actionable information trivial.
- Old breach data can be weaponized faster now, increasing long-term risk from past incidents.