Cyberattacks on Australian Organisations Jump 80 Per Cent

The Australian Signals Directorate reports AI tools are driving a surge in the scale and frequency of malicious cyber operations.

Updated on Oct. 26, 2026 in Cybersecurity

Bold flat-color editorial illustration of an industrial power substation, evoking the structural threat to national infrastructure.
The Australian Signals Directorate reported an 80 per cent surge in cyberattacks during the 2025-26 year, driven by malicious actors using AI tools. AI Illustration. Upload story photo >

Live Poll

Do you trust that your financial institutions can adequately protect your savings from AI-powered cyberattacks?

The Australian Signals Directorate reported an 80 per cent increase in cyberattacks on Australian organisations during the 2025-26 financial year. Criminals and state-sponsored actors are increasingly leveraging frontier AI to identify vulnerabilities and conduct faster, more precise strikes.

Why it matters

The integration of AI into cyber operations allows malicious actors to scale their reach and effectiveness, placing massive pressure on both businesses and national agencies. With attacks on medium-sized enterprises rising significantly, the threat to critical financial infrastructure remains a primary national concern.

Frontier AI models are now routinely used by cyber actors to automatically identify software vulnerabilities, such as those found recently in the PHP language. Many impacted organisations remain vulnerable due to legacy technology that is too old to receive modern security updates.

The players

Australian Signals Directorate

This government agency serves as the lead organisation for signals intelligence and cyber security within the national security framework of Australia.

The details

During the 2025-26 financial year, the Australian Signals Directorate blocked 564 million malicious domains and responded to 139 ransomware incidents. Cyber actors are actively exploiting weaknesses in legacy systems that can no longer be patched, while artificial intelligence enhances their ability to scan and breach defences.

Timeline

  1. The 2025-26 financial year saw the agency respond to 1500 cyber incidents.

  2. August 2025 marked the release of an advisory regarding Chinese state-sponsored cyber espionage.

  3. Last week, PHP vulnerabilities discovered by AI caused website outages.

  4. Tuesday will see the release of the annual cyber threat assessment.

The Tech Race

The current escalation mirrors the findings of the Australian Signals Directorate annual cyber threat assessment, which tracks the evolving sophistication of digital warfare. This trend marks a shift toward AI-automated exploitation, replacing traditional manual probing of network perimeters.

Average costs for businesses reached $93,500 per attack, forcing many firms to increase their security budgets. Users should ensure all software is updated to the latest versions to mitigate risks from legacy vulnerabilities that AI models frequently target.

The takeaway

Organisations should prioritise retiring legacy hardware that no longer receives vendor security updates. Moving toward modern, patchable infrastructure is the most effective defence against automated AI cyber threats.

What happens next

The Australian Signals Directorate is scheduled to release its annual assessment of cyber threats this coming Tuesday.

Further reading

For more information on national digital safety, visit the Cybersecurity section.

Live Poll

Do you trust that your financial institutions can adequately protect your savings from AI-powered cyberattacks?