1,500 cyber incidents force Australian agencies to prioritize security over uptime

Residents of Australia face a higher likelihood of losing access to essential online services in the coming period. The Australian Signals Directorate, known as ASD, issued a warning that organizations must prioritize fixing security flaws over maintaining constant system availability. This shift means that critical infrastructure and government platforms may be taken offline temporarily while repairs are completed.

The agency's annual threat report details a sharp rise in digital attacks. ASD handled 1,500 cybersecurity incidents during the 2025-26 fiscal year, representing a 20% increase from the previous year. The agency also notified external organizations, including businesses and critical infrastructure operators, of more than 4,400 potentially malicious incidents. That notification count surged by 80% over twelve months.

Abigail Bradshaw, the ASD director general, outlined the agency's strategy on Monday. She stated that Australia must accelerate improvements to its technology foundations. Bradshaw argued that leaders must treat cybersecurity as a central business risk rather than an IT issue. She specifically called for the use of AI tools to automate defensive work and help organizations stay ahead of attackers who use the same technology.

The report identifies artificial intelligence as a key factor in the rising threat level. Hostile foreign governments and criminal groups are using AI to collect intelligence, interfere with infrastructure, and steal funds more quickly. ASD noted that state-based actors from the Indo-Pacific region are conducting attacks that may serve as preparation for future conflicts. These activities include intelligence gathering and disruption efforts targeting Australian networks.

Bradshaw highlighted ageing technology as a major vulnerability. She pointed to systems and devices that no longer receive updates from their manufacturers as attractive targets for hackers. Last week, newly discovered weaknesses in PHP, the programming language that powers most websites, forced governments and businesses to rush patches. This incident exemplifies the urgent need for organizations to keep systems updated and report suspicious activity.

Political leaders supported the agency's guidance. Defence minister Richard Marles urged Australians to strengthen their protections by leveraging AI. Home affairs and cybersecurity minister Tony Burke said the government is preparing the nation to handle threats from emerging technologies. Both Bradshaw and Marles reaffirmed that security must take precedence over keeping systems online, even if it results in more frequent temporary outages for users.