Get Used to the Blackouts: The Price of Automated Cyber Warfare

If the seamless operation of modern digital life felt like a permanent reality, Australia’s security apparatus is here to disabuse citizens of that expectation. In its latest annual cyber threat report, the Australian Signals Directorate delivered a pragmatic, if stark, message: expect everyday digital services to drop offline without warning. System security, the agency insists, must now take precedence over constant availability.

This shift in operating priorities reflects a rapidly worsening threat environment. ASD responded to 1,500 cybersecurity incidents in the 2025-26 financial year—a 20% jump over the previous period. Even more revealing is the 80% surge in notifications sent to businesses, government entities, and operators of critical infrastructure regarding potential malicious activity, totaling over 4,400 warnings. Malicious state actors, particularly across the Indo-Pacific, alongside opportunistic criminals, are leveraging artificial intelligence to scan for vulnerabilities, gather intelligence, and position themselves for potential disruption.

The vulnerability of the target environment is compounded by a persistent reliance on legacy technology. Outdated software and unsupported systems remain easy targets for automated intrusion tools. Recent vulnerabilities discovered in ubiquitous web infrastructure like PHP illustrate how fragile the digital foundation remains. When every unpatched legacy system represents an open door, keeping a service live while attempting to secure it becomes an unacceptable risk. ASD Director General Abigail Bradshaw framed the defensive necessity clearly: “We need AI tools to help automate our defences to stay ahead of AI-enabled attackers.”

To counter automated aggression, the security establishment is turning to the very capabilities powering the threat. ASD has secured access to advanced tools such as Anthropic’s Mythos—a model withheld from public distribution specifically due to its potent ability to identify unknown software flaws. Defense Minister Richard Marles supported this posture upon the report's release, stating that “To stay ahead, Australians must enhance their cyber defences while harnessing AI’s benefit.” Meanwhile, Home Affairs Minister Tony Burke stressed national efforts to align policy with these rapid technological shifts.

Cybersecurity has definitively migrated from the server room into executive boardrooms. Organizations face an environment where temporary offline status is a minor operational inconvenience compared to a structural compromise. As Bradshaw noted, “In a threat environment transformed by AI, collective action is our strongest defence.” For consumers, the trade-off is equally clear: accepting periodic digital blackouts is now the baseline price of protecting critical networks.

Written by Thomas Nussbaumer thomas.nussbaumer@alpineweekly.com