Microsoft’s latest Digital Defense Report for 2024 has revealed alarming statistics on the growing threat landscape for Windows users. The tech giant reports that Windows users face over 600 million cyberattacks every day, including ransomware, phishing, and identity theft. A staggering 99% of these attacks focus on exploiting weak or stolen passwords.

Trojans, such as Trickbot, Emotet, Dridex, and AgentTesla, make up half of all threats detected on Windows systems. Meanwhile, the company has also reported a concerning rise in identity-based attacks, with over 4,000 identity attacks occurring every second. These attacks are primarily driven by credential stuffing and phishing tactics.

Microsoft’s threat defense systems are working around the clock, processing an incredible 65 trillion threat signals daily. These signals, analyzed using advanced AI and data analytics, help to protect not just Windows systems but also Microsoft services like Azure and Microsoft 365. Despite these efforts, Microsoft has also faced its own security challenges, including a major attack in January 2024 by Russian-backed hackers, who infiltrated the email accounts of senior leadership.

Adding to the risk is the continued use of exposed passwords by many Windows users. Microsoft found that 44 million accounts are using credentials compromised in past breaches, making them vulnerable to password spraying and phishing attacks. To address these risks, Microsoft urges users to adopt stronger cybersecurity practices, such as using multifactor authentication and avoiding password reuse.

Furthermore, hackers are increasingly impersonating Microsoft applications like Word, Excel, and OneDrive to distribute malware. A recent campaign disguised a remote access Trojan as a legitimate Microsoft Word file, showing just how effective social engineering tactics can be.

Despite the growing threat, Microsoft emphasizes that protecting against these cyberattacks doesn’t have to be complex. Users are urged to enable two-factor authentication, use strong passwords, and install antivirus programs to bolster security.

For Windows 11 users, Microsoft recommends enabling 10 specific security settings to keep their systems safe.