Australia Prepares for Cyber-Driven Service Outages

The Australian Signals Directorate has instructed organizations to prioritize network security over continuous access, warning that essential online services will face temporary blackouts during critical maintenance. This shift acknowledges that the cost of securing infrastructure now includes planned unavailability, a trade-off the agency says is necessary against a rising tide of digital attacks.

ASD reported handling 1,500 cybersecurity incidents in the 2025-26 fiscal year, marking a 20% increase from the prior period. The agency also notified external entities, including businesses and government bodies, of more than 4,400 potentially malicious incidents. This notification count rose by 80% over the same timeframe, signaling a sharp acceleration in threat volume.

The annual threat report identifies artificial intelligence as a primary driver of this surge. Hostile foreign governments and criminal groups are using AI to gather intelligence, disrupt critical infrastructure, and accelerate financial theft. The agency noted that state-based actors in the Indo-Pacific region are currently conducting operations that may serve as preparation for future conflicts.

Director General Abigail Bradshaw stated on Monday that Australia must accelerate upgrades to its technology foundations. She advocated for the adoption of advanced AI models to automate defensive tasks and identify vulnerabilities before attackers can exploit them. Bradshaw referenced ASD’s access to Anthropic’s Mythos model, a tool the developer has kept private due to its ability to find unknown flaws in IT systems.

Minister for Defence Richard Marles and Minister for Home Affairs Tony Burke emphasized that leadership must treat cybersecurity as a central business risk. Both officials urged the public and private sectors to modernize their defenses while leveraging new technologies. They agreed that keeping systems secure often requires taking them offline temporarily, a move Bradshaw described as preferable to maintaining vulnerable uptime.

Ageing technology remains a significant vulnerability, particularly systems from manufacturers who no longer issue updates. Last week, new weaknesses found in PHP, the language underpinning much of the web, forced a rapid response from government and private entities. ASD advised all organizations to keep systems updated, report suspicious activity, and seek assistance to mitigate these risks.