Weekly Insight: AI-powered cyber threats accelerate

Accelerating threats

The Australian Signals Directorate has warned of a surge in AI-powered cyber threats, with a 20% increase in cybersecurity incidents in the past year. The agency urges organisations to modernise outdated systems, adopt AI-based defences, and prioritise security over service availability.

The agency's Annual Cyber Threat Report 2025-2026 recorded more than 1,500 cyber security incidents requiring an agency response, an increase of more than 20% from the previous financial year. The agency also issued more than 4,400 warnings about malicious activity, an increase of almost 80%.

Legacy tech exposed

The agency warns that legacy technology is leaving businesses exposed to cyberattacks. The directorate's director-general, Abigail Bradshaw, said that organisations must take action to improve basic cyber hygiene and prioritise system security over system availability. She also urged firms and agencies to quickly update their cyber protections, even if it meant shutting down an online presence temporarily to safeguard their operations.

The directorate's concerns are highlighted by the recent breach of Australia's Medicare statistics reporting portal, which was caused by a vulnerability in the PHP programming language. The breach was patched, but it highlights the need for organisations to regularly update their software and systems to prevent similar attacks.

A sensible next step

Organisations should review their current cyber security measures and consider implementing AI-based defences. They should also prioritise security over service availability and be prepared to temporarily shut down online services if necessary. The Australian Signals Directorate has provided guidance on how to implement AI-based defences and prioritise security, and organisations should take advantage of this guidance to improve their cyber security posture.