Allied Intelligence — 2026-10-29

Australian Signals Directorate Warns AI Will Drive More Disruptive Cyberattacks in Annual Cyber Threat Report

BLUFASD's pivot from prevention to disruption management signals that Australian critical infrastructure operators should plan for AI-driven cyber incidents as a recurring operational condition, not an exceptional event.

The Australian Signals Directorate released its seventh annual Cyber Threat Report on Tuesday, October 27, stating that AI has been "the defining force" in the threat landscape and lets actors find vulnerabilities faster and exploit them at greater scale 12. The ASD reported more than 82,000 cybercrime reports, over 1,500 incidents handled, and over 4,400 notifications of potentially malicious activity, almost an 80% increase 1. ABC separately cited a 20% rise in incidents requiring ASD response 3. Director-General Abigail Bradshaw said more disruption is "inevitable" with each capability increase, and said ASD has set up early-warning protocols with AI labs including OpenAI, shared with Five Eyes agencies 3. ASD also disclosed it disconnected the Amadey malware controller from 180,000 computers and destroyed 5 terabytes of stolen data 3.

Analysis
ASD's report shifts Australian planning from preventing AI-enabled intrusions to managing recurring service disruption, so agencies and operators must now budget for outages and emergency patching. ASD has extended early-warning protocols to all AI labs and every Five Eyes agency and expects to be engaged before model testing begins. Bradshaw expects state actors to follow criminals in adopting AI, and the report names China, Russia and North Korea as already targeting Australia or its allies. The Amadey takedown shows ASD will act offensively against criminal infrastructure, but nothing in the report suggests such operations can match AI-driven exploitation. Confidence is high, because the ASD release and ABC reporting, the two primary sources, agree on the core warnings, though outlets' incident figures measure different things. Ordinary unpatched legacy systems may explain much of the rise in incidents and recent website takedowns, and AI emphasis may partly serve agency budget positioning.

5 sources