Israel is the second-most targeted country in the world, and first in the Middle East, by cyberattacks, according to Microsoft’s 2026 “Digital Defense Report ” published on Thursday.

The United States ranked first with 531 observed events, while Israel had 210. Taiwan and Japan follow with 193 and 172, respectively, before a significant drop-off with the United Kingdom in fifth place.

The report also mentioned that Israel experienced a 21% surge in ransomware attacks since 2025.

Iran is considered to be a major source of Israel’s cyber incidents, the report mentioned, noting that the government of the Islamic Republic is known to be conducting broad, multi-layered campaigns against Israel and other adversaries throughout the Middle East, especially since the start of its war with the US and Israel this year.

The report also said that Iranian forces have recently expanded cyber and influence operations designed to target and disrupt military and information activities, while attempting to expand “strategic messaging and operational impact.”

Gaby Portnoy, Director General of the Israel National Cyber Directorate at the annual Cyber Week, at the Tel Aviv University, on June 27, 2023.
Gaby Portnoy, Director General of the Israel National Cyber Directorate at the annual Cyber Week, at the Tel Aviv University, on June 27, 2023. (credit: AVSHALOM SASSONI/FLASH90)

Israel's head of National Cyber Directorate says Israel in a constant battle

Israel National Cyber Directorate Chief Yossi Karadi addressed the report, saying, “The State of Israel is in an intense campaign in cyberspace and stands at the forefront of global threats. As the national cyber defense organization, our mission is to minimize as much as possible the impact of attacks, prevent harm to citizens and essential services, and enable the country to continue functioning even under a continuous threat.”

He went on to say, “The fact that Israel maintains functional continuity under such a volume of threats is not to be taken for granted. It is the result of an integrated national defense system in which the INCD operates alongside defense bodies, government ministries, the economy, the cyber industry, and global companies.”

Karadi emphasized that in cyberspace, there is no ceasefire, and although “you may not see missiles in the air, the fight in cyberspace is waged on a 24/7 basis.”

He also discussed AI’s accelerating role in the field, and the challenges that come with its ability to intensify attacks and transform the cyber landscape.

“Faced with this reality, we will continue to develop advanced capabilities, deepen collaborations, and strengthen national resilience. In cyberspace, victories are often quiet victories expressed in blocked attacks, prevented damage, and the continuation of routines,” he said.