澳大利亚信号局警告网络威胁上升,呼吁优先保障系统安全
Australians should prepare for online services to go down unexpectedly as threats rise, cyber agency warns
澳大利亚信号局(ASD)在年度网络威胁报告中警告,澳大利亚人应做好更多基础且重要的在线服务意外中断的准备,并称系统安全必须优先于系统可用性。报告显示,ASD 在 2025-26 年度响应了 1500 起网络安全事件,同比增长 20%,并向外部实体通报了超过 4400 起潜在恶意网络事件,同比增长 80%。ASD 表示敌对外国政府、犯罪分子和黑客正利用 AI 收集情报、破坏关键基础设施和窃取资金,呼吁企业和关键基础设施使用前沿 AI 模型来自动化防御,并提到该机构可使用 Anthropic 的 Mythos 模型。
推荐理由
AI 评分 50
澳大利亚信号局年度报告给出网络事件与通报数量的同比变化,并说明 AI 同时被攻防双方使用。
主题
正文
Australians should prepare for more basic and important online services to go offline unexpectedly, the nation’s signals intelligence agency has warned, urging that “system security must be prioritised over system availability”.
The Australian Signals Directorate (ASD) also says businesses and critical infrastructure must use cutting-edge AI models to defend against digital threats, raising alarm that artificial intelligence is enabling more dangerous threats than ever.
In its annual cyber threat report, ASD warns hostile foreign governments, criminals and hackers are using AI to gather intelligence, disrupt critical infrastructure and steal money, and that Australians should fight fire with fire.
“We need AI tools to help automate our defences to stay ahead of AI-enabled attackers,” the ASD director general, Abigail Bradshaw, said on Monday.
“Australia must accelerate the modernisation of its technology and cybersecurity foundations to protect the systems we rely on every day.”
The annual threat report, released on Tuesday, revealed that ASD had responded to 1,500 cybersecurity incidents in the 2025-26 year, an increase of 20% from the previous year. It also notified external entities – including businesses, governments and critical infrastructure – of more than 4,400 potential malicious cyber incidents, up 80% in a year. AI is expected to accelerate those dangers in future.
ASD said government and private networks in Australia experienced “persistent” breach attempts from state-based actors last year, and claimed such actors “in the Indo-Pacific” could be launching attacks to prepare for potential future conflicts – including “future intelligence collection or disruption activities”.
The agency said the increasing availability of AI was creating positive opportunities, but also allowing cybercriminals and state-based actors to find vulnerabilities and launch attacks faster and more effectively. ASD warned “all network owners are facing elevated threat levels”, saying cybersecurity was now a “core business risk and leadership responsibility” for all organisations, no longer only a technical concern.
The report said integrating AI tools into cybersecurity functions could help find potential weaknesses or suspicious behaviour, and improve responses.
“To strengthen our cyber defences, we must harness the technologies that are reshaping the threat environment,” Bradshaw said.
She has spoken previously about ASD having access to Anthropic’s Mythos model, the powerful AI tool which the frontier lab said it couldn’t release publicly because it could identify unknown flaws in IT systems. While the use of AI by malicious actors is on the rise, Australian government agencies believe having access to such frontier models and collaborating with leading AI labs is critical to bolstering cybersecurity.
“To stay ahead, Australians must enhance their cyber defences while harnessing AI’s benefit,” the defence minister, Richard Marles, said on the report’s release.
Sign up to Politics, really
Our political team brings you up to speed on the stories that really matter and what they mean for you
Bradshaw said “legacy technology”, such as outdated systems or devices that were no longer supported with new updates by their creators, were among the biggest risks and most attractive targets for hackers. ASD called for Australia to modernise technology and cybersecurity capabilities, and said all organisations must take stronger action to ward off new threats.
Last week, newly discovered vulnerabilities in PHP – a programming language that underpins most websites – triggered a rush by governments and businesses to fix the problem.
ASD urged organisations to update their systems, seek help from ASD and report suspicious incidents.
Bradshaw and Marles said organisations should prioritise the security of their systems over keeping them online, which could mean more services are forced to go offline while they are secured.
“In a threat environment transformed by AI, collective action is our strongest defence,” Bradshaw said.