Loading story…
Australian organisations are facing heightened cybersecurity challenges, with the Australian Cyber Security Centre (ACSC) reporting a significant increase in cyber incidents and alerts during FY2024–25. Over 1,200 incidents were handled, marking an 11% year-on-year rise, and more than 1,700 alerts were issued, an 83% increase. Notably, some mining and manufacturing entities took over 520 days to detect intrusions, with an additional 84-day delay before reporting, resulting in the exposure of personal data for up to 3.6 million Australians. These delays highlight persistent weaknesses in monitoring, patching, and identity governance—areas directly targeted by the Essential Eight controls.
Looking ahead to 2026, the ACSC is expected to tighten Essential Eight requirements, emphasizing faster patching, stronger identity assurance, and the inclusion of cloud and OT/ICS environments. Organisations that rely on flexible or exception-heavy interpretations of the Essential Eight are likely to face increased scrutiny from boards, insurers, and regulators. The focus is shifting from compliance optics to demonstrable resilience, with uplift anticipated in patching speed, privileged access discipline, and hardening practices, especially for high-risk sectors. Maintaining static controls in a dynamic threat environment could leave organisations vulnerable to evolving threats.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cybersecurity experts and industry reports highlight evolving threats and persistent challenges as organizations prepare for 2026. Attackers are increasingly exploiting misconfigurations, leveraging AI-driven social engineering, and taking advantage of complex, rapidly changing cloud environments. Despite technological advancements, human error and configuration drift remain leading causes of breaches, with automation and policy enforcement recommended as key mitigations. The financial services sector, while showing improved prevention effectiveness due to regulatory pressure and investment, still faces critical weaknesses at specific attack stages, underscoring the need for continuous validation and adaptive controls. Industry commentary and newsletters reflect on the rapid pace of change, with significant M&A activity, the growing impact of AI on cybersecurity strategies, and ongoing struggles with vulnerability management and software supply chain security. The sector is urged to address these systemic issues by adopting risk-based approaches, improving transparency, and integrating new frameworks such as the OWASP Agentic AI Top 10. As organizations look ahead, the consensus is that while progress is being made, the threat landscape is becoming more sophisticated, requiring ongoing vigilance and innovation.
Jun 29, 2026
Organizations worldwide are facing an evolving threat landscape, with cyber adversaries leveraging artificial intelligence and automation to increase the speed and scale of attacks. Large enterprises have made significant investments in cybersecurity, deploying advanced solutions and dedicated personnel, while small and medium-sized businesses (SMBs) often struggle to keep pace due to limited resources. This disparity has led to a widening gap in cyber-resilience, making SMBs particularly vulnerable to cyber threats. Security hardening has emerged as a critical strategy for organizations, especially those with constrained budgets, to reduce their attack surface by properly configuring systems and networks. Essential measures include enforcing strong authentication and authorization policies, implementing strict password requirements, and minimizing unnecessary services and open ports. Meanwhile, the concept of cyber resilience has shifted from merely withstanding attacks to ensuring rapid recovery and continuity of operations amid persistent, disruptive threats. Boardrooms are increasingly focused on questions of recovery and service resumption, driven by new regulations such as NIS2 and the UK Cybersecurity and Resilience Bill. Research indicates that 86% of recent cyber incidents involve deliberate attempts to disrupt core operations, with attackers able to exfiltrate data in under an hour in many cases. The proliferation of nearly 9 million new threats daily has compressed defenders’ response windows from days to minutes, challenging traditional security postures. To address these challenges, organizations are urged to adopt a new defensive playbook that leverages AI for both detection and resilience, while also fostering collaboration across IT and OT teams. International standards like IEC 62443 and ISO/IEC 27001 provide frameworks for aligning security practices and managing third-party risks. Comprehensive asset inventories and software bills of materials are recommended to maintain an accurate view of operational technology (OT) environments, enabling more effective risk assessments and prioritization of critical systems. Joint guidance from agencies such as CISA and the UK NCSC emphasizes the importance of architectural controls and cross-team coordination to secure OT systems. Ultimately, a combination of security hardening, regulatory compliance, and adaptive resilience strategies is essential for organizations to withstand and recover from the relentless pace of modern cyber threats.
Jun 29, 2026
Geopolitical instability, rapid technological advancement, and persistent skills shortages are fundamentally reshaping the cybersecurity landscape for organizations worldwide. According to a PwC report, 60% of executives now rank cyber risk investment among their top three strategic priorities, driven by concerns over political instability, trade disputes, and shifting alliances. Despite this heightened awareness, only about half of surveyed organizations feel very capable of withstanding cyberattacks on common vulnerabilities, and a mere 6% report preparedness across all vulnerabilities, highlighting significant exposure through legacy systems and complex supply chains. The financial impact of breaches remains severe, with over a quarter of respondents experiencing incidents costing at least $1 million in the past three years, disproportionately affecting large enterprises and technology-driven sectors. Spending on cybersecurity is increasing, with 78% of organizations expecting budget growth, yet only 24% are channeling more resources into proactive measures such as monitoring, testing, and training, indicating a continued reactive posture. The ENISA Threat Landscape 2025 report underscores the professionalization of cybercrime, the convergence of criminal and state-aligned actors, and the rise of hacktivist groups leveraging ransomware for both ideological and financial gain. Ransomware remains the most disruptive threat across the EU, with groups adopting decentralized operations, double- and triple-extortion tactics, and exploiting regulatory compliance fears to pressure victims. The proliferation of Ransomware-as-a-Service (RaaS), public leaks of builder tools, and the emergence of access brokers have lowered barriers to entry, fueling a diverse and persistent threat ecosystem. Weak authentication practices persist in many organizations, with passwords and SMS codes still dominant despite their vulnerability to phishing and credential theft. A significant portion of employees have never received cybersecurity training, and outdated policies further exacerbate risk, as personal and professional security habits often overlap, creating additional attack vectors. The adoption of stronger authentication methods, such as device-bound passkeys, remains limited, and resistance to multi-factor authentication is common due to perceived complexity. The use of AI in both attack and defense is accelerating, with AI-generated phishing campaigns and adaptive malware becoming more prevalent, while defenders also leverage AI for predictive threat detection. The overall picture is one of rising threat sophistication, uneven organizational preparedness, and a pressing need for sustained investment in proactive security measures, workforce training, and the adoption of advanced technologies to build resilience against an increasingly complex cyber threat landscape.
Jun 29, 2026