<p>Microgrids are a cornerstone of modern energy infrastructure, but the increase in digitalization presents security challenges. Cyberattacks can target various microgrid components and have the potential to disrupt operations and compromise data integrity, leading to faults, power blackouts or even physical damage. To safeguard the operation and reliability of microgrids, defence mechanisms, including detection and mitigation strategies, are being advanced. The complexity of the cybersecurity landscape, owing to the diversity of microgrid models, configurations and control algorithms, as well as the types of cyberattack and target locations, presents numerous challenges and opportunities. This Review surveys the key developments and challenges in securing microgrids against cyber threats, with a focus on microgrid control. The fundamental structure and vulnerabilities of cyber–physical microgrids are outlined, and the potential impact of cyberattacks is examined. Methods for attack detection and mitigation are identified and categorized based on microgrid modelling approaches and control objectives. Finally, emerging defence technologies and promising research opportunities in microgrid cybersecurity are highlighted.</p>