This report outlines the cyber threats Australia is facing. It describes the cyber threat landscape of who is targeting Australia, what malicious cyber actors are targeting and common techniques used by malicious cyber actors. It presents the year in review and protection actions for all Australians.

Key findings

• State-sponsored cyber actors continue to pose a serious and growing threat to Australia. They target networks operated by Australian governments, critical infrastructure and businesses for state goals.
• The threat from cybercrime continues to challenge Australia’s economic and social prosperity, with average reported financial losses, the frequency of ransomware attacks and the number of reported data breaches all increasing throughout FY2024–25.
• Malicious cyber actors are able to leverage vulnerabilities in the technology and security practices of individuals and businesses throughout the public and private sectors.
• The prevalence of artificial intelligence (AI) almost certainly enables malicious cyber actors to execute attacks on a larger scale and at a faster rate. The potential opportunities open to malicious cyber actors continue to grow in line with Australia’s increasing uptake of – and reliance on – internet-connected technology.

The report is accompanied by fact sheets for individuals, businesses and organisations, and for critical infrastructure.