The Australian Signals Directorate (ASD) has released its Annual Cyber Threat Report for 2024-25, painting a sobering picture of the nation’s cybersecurity challenges. As digital threats evolve in sophistication and scale, both state-sponsored actors and cybercriminals are ramping up their attacks on Australian networks, with significant implications for government, business, and individuals alike

State-Sponsored Threats: A Growing National Security Concern

State-sponsored cyber actors have emerged as a serious and growing threat throughout the 2024-25 financial year (for those reading outside Australia that’s between July 24 and June 25), targeting networks operated by various branches of governments, critical infrastructure, and businesses for state goals. This escalation represents a shift in the threat landscape, where geopolitical tensions increasingly manifest in the digital realm.

The strategic targeting of critical infrastructure is particularly concerning, as successful attacks could disrupt essential services that Australians rely on daily – from energy and water supplies to telecommunications and transportation systems.

Unprecedented Rise in Threat Notifications

Perhaps the most striking statistic from the report is the dramatic increase in threat notifications. During the 2024-25 fiscal year, the ASD’s Australian Cyber Security Centre (ACSC) notified entities more than 1,700 times of potentially malicious cyber activity – an 83% increase from the previous year. This surge underscores both the increasing volume of threats and the ACSC’s enhanced capability to detect and communicate potential compromises.

This represents a watershed moment in Australian cybersecurity, with the notification rate far outpacing previous years. It’s a clear signal that organisations cannot afford complacency when it comes to their digital defences.

Cybercrime: The Persistent Economic Threat

While state-sponsored activity grabs headlines, cybercrime remains the bread-and-butter threat affecting everyday Australians and businesses. Cybercrime continues to challenge Australia’s economic and social wellbeing, with criminals employing increasingly sophisticated tactics to exploit vulnerabilities. Over 84,700 cybercrime reports were submitted to the ASD in 2024-25, averaging one report every six minutes. The average self-reported financial cost of cybercrime has increased significantly, with businesses reporting average losses of $80,850 per incident. Large organisations face even steeper costs, averaging $202,691 per incident – a staggering 219% increase from the previous year.

The Human Factor: Australians Reaching Out for Help

The increase in cyber incidents has prompted more Australians to seek assistance. During 2024-25, the ASD received over 42,500 calls to the Australian Cyber Security Hotline, a 16% increase from the previous year, averaging 116 calls per day. This growing engagement demonstrates heightened awareness, but also reflects the scale of the problem facing the nation.

A Call to Action

The report highlights the persistent threat of malicious cyber activity to the nation, underscoring the urgency of action by all Australians and Australian businesses to raise the nation’s cybersecurity defences. This isn’t simply a government or IT department problem – it requires a whole-of-nation approach.

The message is clear: as threats evolve and intensify, Australia’s collective cyber resilience must strengthen in response. From implementing multi-factor authentication and regular software updates to fostering a culture of cybersecurity awareness, every Australian has a role to play in building a more secure digital future.

Looking Ahead

The report serves as both a warning and a roadmap. With an 83% increase in threat notifications and state-sponsored actors actively targeting Australian interests, the stakes have never been higher. Yet the report also demonstrates that Australia is building robust detection and response capabilities through the ACSC.

The question now is whether the nation – from government agencies to small businesses and individual citizens – can translate this awareness into meaningful action fast enough to stay ahead of an adversary that never stops evolving.

For more information or to report a cyber incident, Australians can contact the Australian Cyber Security Hotline at 1300 CYBER1 (1300 292 371), available 24/7.