Australians should prepare for online services to go down unexpectedly as threats rise, cyber agency warns

Australian Signals Directorate chief says advanced AI tools are needed to defend against ‘AI-enabled attackers’

Get our daily political email, free app or daily news podcast

Australians should prepare for more basic and important online services to go offline unexpectedly, the nation’s signals intelligence agency has warned, urging that “system security must be prioritised over system availability”.

The Australian Signals Directorate (ASD) also says businesses and critical infrastructure must use cutting-edge AI models to defend against digital threats, raising alarm that artificial intelligence is enabling more dangerous threats than ever.

In its annual cyber threat report, ASD warns hostile foreign governments, criminals and hackers are using AI to gather intelligence, disrupt critical infrastructure and steal money, and that Australians should fight fire with fire.

“We need AI tools to help automate our defences to stay ahead of AI-enabled attackers,” the ASD director general, Abigail Bradshaw, said on Monday.

“Australia must accelerate the modernisation of its technology and cybersecurity foundations to protect the systems we rely on every day.”

The annual threat report, released on Tuesday, revealed that ASD had responded to 1,500 cybersecurity incidents in the 2025-26 year, an increase of 20% from the previous year. It also notified external entities – including businesses, governments and critical infrastructure – of more than 4,400 potential malicious cyber incidents, up 80% in a year. AI is expected to accelerate those dangers in future.

ASD said government and private networks in Australia experienced “persistent” breach attempts from state-based actors last year, and claimed such actors “in the Indo-Pacific” could be launching attacks to prepare for potential future conflicts – including “future intelligence collection or disruption activities”.

The agency said the increasing availability of AI was creating positive opportunities, but also allowing cybercriminals and state-based actors to find vulnerabilities and launch attacks faster and more effectively. ASD warned “all network owners are facing elevated threat levels”, saying cybersecurity was now a “core business risk and leadership responsibility” for all organisations, no longer only a technical concern.

The report said integrating AI tools into cybersecurity functions could help find potential weaknesses or suspicious behaviour, and improve responses.

“To strengthen our cyber defences, we must harness the technologies that are reshaping the threat environment,” Bradshaw said.

She has spoken previously about ASD having access to Anthropic’s Mythos model, the powerful AI tool which the frontier lab said it couldn’t release publicly because it could identify unknown flaws in IT systems. While the use of AI by malicious actors is on the rise, Australian government agencies believe having access to such frontier models and collaborating with leading AI labs is critical to bolstering cybersecurity.