Australia says AI is speeding cyber threats—but its incident count does not isolate AI
Australia's cyber agency responded to 1,524 incidents in 2025–26 and says AI is lowering barriers for attackers. The annual report does not state how many incidents were AI-enabled, so urgency and attribution must be kept separate.
The short version
- What happened
- ASD's cyber centre responded to 1,524 incidents in 2025–26, 20% more than the previous year, and issued more than 4,400 potential-malicious-activity notifications. Its incident classification method changed, limiting some year-on-year comparisons.
- Who it affects
- Employees and households face more convincing impersonation and less time to respond, but the safest response remains concrete: verify unusual requests through another channel, protect accounts with phishing-resistant authentication and apply security updates quickly.
- What remains unproven
- No denominator for incidents caused or materially enabled by AI
Keep in mind
No denominator for incidents caused or materially enabled by AI
Incident classification changed in 2025–26, limiting category comparisons
Cybercrime reporting is incomplete and affected by awareness and legal obligations
Average loss figures are self-reported and span all cybercrime, not AI-specific cases
Some threat judgements rely on intelligence that cannot be independently reproduced from the public report
Source analysis · 2 linked sources. Primary analysed source date: 26 October 2026.
Read the full report · 4 min The evidence, methods, implications and limitations
The measured rise is real; the AI share is unknown
Australia's national cyber centre says it responded to 1,524 cyber security incidents in the 2025–26 financial year, 20% more than the year before and 36% more than five years earlier. It notified organisations of potential malicious activity more than 4,400 times, including more than 2,200 individual notifications and collective notices to over 2,100 entities. ReportCyber received more than 82,000 cybercrime reports—roughly one every six minutes.
Those numbers describe the wider cyber environment. The Australian Signals Directorate's report calls AI a defining force and says it has observed increased risks and exposure, but it does not publish an AI-attributable incident count. It also says the incident-classification method was updated during 2025–26, so some categories do not align with the previous year. The 20% increase cannot therefore be read as a measured effect of AI.[1][2]
Where the agency says AI changes the attack path
The report identifies three mechanisms rather than a new species of attack. AI can help write and tailor phishing messages, analyse public or stolen data, and reduce the effort needed to identify or chain software vulnerabilities. It says most vulnerability exploitation has historically occurred within two weeks of disclosure, with some exploitation within 48 hours of mitigation advice, and expects AI-driven tools to compress that window further. That expectation is a threat assessment, not a prospective measurement of an AI effect.
AI integration can also create a new organisational attack surface. Poorly enforced boundaries, ambiguous instructions and excessive permissions may let an agent take unsafe actions or expose information. The agency's advice is correspondingly familiar: patch faster, reduce legacy exposure, log events, use passkeys or multi-factor authentication, constrain privileges, validate outputs and preserve audit trails. AI changes speed and scale; it does not make those controls obsolete.[1]
The distinction that matters
What the annual report measures—and what it infers
Operational counts are direct observations; AI attribution is an intelligence assessment without a published incident denominator.
Observed
1,524 response incidents and 4,400+ notifications
National cyber workload increased
Assessed
AI lowers effort for phishing, analysis and vulnerability work
Threat speed and scale may rise
Not reported
No AI-enabled incident count or matched comparison
The overall increase cannot be attributed to AI
People should not mistake aggregate harm for AI attribution
The report estimates an average self-reported cybercrime cost of A$33,000 for individuals and A$93,500 for businesses, but those values come from reports across all cybercrime types and are not verified losses caused by AI. Under-reporting is likely, while self-reported costs and response activity also reflect awareness, reporting obligations and the agency's own detection. They show material harm and operational load, not a controlled trend study.
For workers handling payments, credentials or customer data, the practical consequence is less time to notice a convincing request or patch a known flaw. A stronger future assessment would publish a reproducible definition of AI-enabled activity, counts by attack stage, comparison cases without AI and confidence levels for classified intelligence. Until then, the report supports faster defensive preparation, but not a claim that AI caused the overall incident rise.[1]