The Australian Signals Directorate has said the chances of an Aussie organisation experiencing some form of cyber incident have “increased substantially”.
The stark new warning is based on the ASD’s seventh annual Cyber Threat Report, covering the 2025-26 financial year.
In that time, the ASD’s Australian Cyber Security Centre fielded over 82,000 cybercrime reports – about one every six minutes.
In addition, the agency responded to more than 1,500 cyber security incidents and notified more than 4,400 Australian organisations of potentially malicious activity.
That’s 80 per cent more than the previous year.
The report’s findings prompted Minister for Home Affairs and Minister for Cyber Security, Tony Burke, to deliver a clear warning: “being under attack is certain, constant and ever present”.
The ASD noted that AI has become “the defining force in the cyber threat landscape” over the last 12 months, giving threat actors vastly greater ability to act at speed and scale.
At the same time, however, the ASD believes AI has more potential to boost Australia’s sovereign capabilities and national security than any technology since World War Two.
“ASD’s Annual Cyber Threat Report reflects the fact that Australia continues to face a challenging strategic environment with AI accelerating the scale, speed and complexity of cyber threats,” Richard Marles, Deputy Prime Minister and Minister for Defence, said in an October 27 statement.
“AI is reshaping the online landscape, enabling cybercriminals and state-sponsored actors to launch faster, more sophisticated and scalable attacks. To stay ahead, Australians must enhance their cyber defences while harnessing AI’s benefits.
“The Annual Cyber Threat Report reinforces that government and industry must continue to work together to strengthen our collective cyber resilience and safeguard our critical digital infrastructure.”
In the wake of the report, the ASD is urging Australian organisations to strengthen cyber resilience, address vulnerabilities quickly and prioritise security over service availability.
“It is vital that businesses prepare for service disruptions from a cyber incident,” the ASD said.
“Protecting Australia's critical infrastructure and essential services starts with strengthening cyber resilience, addressing vulnerabilities quickly and embedding strong cyber security practices before incidents occur.”Other key figures include:
More than 37,500 calls answered by the Australian Cyber Security Hotline.
The publication of 76 cyber alerts and advisories, including joint releases with international partners.
More than 564 million malicious domains blocked after ASD’s Protective Domain Name System processed more than 220 billion queries.
Average reported cybercrime costs of $33,000 for individuals and $93,500 for businesses.
The ASD is also calling on organisations to report suspicious activity earlier and prepare for cyber incidents that could disrupt essential services.
“To keep people safe, we’re positioning Australia to respond to the evolving threats and opportunities presented by emerging technologies,” Burke said.
“That starts with protecting critical infrastructure and government systems, securing technology at its source and enabling people as our strongest defence, to become Australia’s ‘human firewall’.”
You can read the full report here.
Want to see more stories from trusted news sources?Make Cyber Daily a preferred news source on Google.
