The UK is now the most-attacked country in Europe for state-backed hacking, and Microsoft says AI is helping attackers move from planning to execution in minutes instead of days.
Microsoft's latest threat report puts the UK fifth globally for customers hit by cyberattacks, accounting for 3.8% of global activity, and first in Europe for nation-state and geopolitical activity, with 76 observed events in the past year. AI is compressing the attack lifecycle, letting hackers skip the days of reconnaissance that used to precede a strike, but the entry points remain stubbornly familiar. Phishing jumped from 7% to 23% of incident-response intrusions year-over-year, and voice phishing (fake Teams calls from a supposed colleague or IT helpdesk) rose 502%. Ransomware detections climbed too: up 66% in the UK, 50% in the US, and 276% in Germany.
That combination matters more than the raw numbers suggest: AI doesn't just speed up attacks, it collapses the warning window that security teams rely on to detect and contain an intrusion before damage is done. Within the critical-infrastructure bucket Microsoft tracked, research and academia absorbed 38% of attacks, followed by transport at 22% and government agencies at 13%, meaning the institutions least equipped to move fast are facing the fastest-moving threats.
Microsoft's own fix, more public-private partnerships, is the kind of answer that sounds reassuring and commits to very little, especially for a government that just topped Europe's most-targeted list.