Defence releases annual Cyber Threat Report 2022-23

The Australian Signals Directorate (ASD) has released its Annual Cyber Threat Report for 2022-23, laying bare Australia’s cyber threat landscape.

Reflecting the global strategic context, this year’s report highlights that Australian governments, critical infrastructure, businesses and households continue to be the target of malicious state and non-state cyber actors.

“The report underscores the importance of ASD’s work in defending Australia’s security and prosperity and reinforces the significance of the Albanese Government’s investment in ASD’s cyber and intelligence capabilities under Project REDSPICE,” said Australia’s Deputy Prime Minister and Minister for Defence Richard Marles..

“We know that the best cyber defences are founded on genuine partnerships. The development of this report, which draws on insights from across the Commonwealth Government, our international partners, Australian industry and the community, is a testament to this collaboration.”

Key findings from the report include:

• ASD received over 33,000 calls to its Australian Cyber Security Hotline, an increase of 32 per cent from 2021-22
• ASD’s Australian Cyber Security Centre received over 94,000 reports of cybercrime over the financial year, an increase of 23 per cent from 2021-22
• ASD responded to over 1,100 cyber security incidents, with over 10 per cent of those related to attacks using ransomware – a type of malicious software used to lock users out of networks unless a ransom payment is received
• The average cost of cybercrime per report rose by 14 per cent from 2021-22, to $71,600 for large businesses, $97,200 for mid-size businesses and $46,000 for small businesses

The report illustrates the persistent threat that state cyber capabilities pose to Australia. It also shows that cybercrime remains a major threat to Australians, as cybercriminals continue to adapt their destructive tactics to extract maximum profit from their crimes.

Data breaches also affected millions of Australians in the last financial year and risked ongoing harm through fraud and scams.

Many Australian systems and networks were at risk because they were unpatched and threat actors were quick to exploit critical vulnerabilities, sometimes launching attacks within hours.

The release of this year’s Annual Cyber Threat Report reinforces the call for all Australians to play their part in protecting our nation’s cybersecurity future.

The Albanese Government is committed to leading these efforts by maintaining an enduring focus on cyber security, including through its investment in Project REDSPICE.

Working together across government, industry and the community is vital to enhancing Australia’s cyber resilience and boosting our cyber defences.