Running a business? The chances are good that you’re already thinking about the potential impact of AI on your operations. One particular area of concern is cybercrime, which is increasingly being powered by generative AI and related techniques.
So, what can be done about this?
Why AI Is Changing the Cyber Threat for Australian Businesses
The strategy of the average hacker, not so long ago, was to assemble a large repository of emails and send a generic message to each of them, in the hope that a large enough number would click on a link, grant permission, or enter sensitive information into a fake form.
Messages couldn’t be tailored or sophisticated, because the cost of composing thousands of these messages was prohibitive.
But now, thanks to the emergence of Large Language Models, the cost of composing those emails has fallen rapidly. And it isn’t just words that now come easier: the research and data harvesting that underpin those words can be automated in much the same way.
Elastic’s 2025 Global Threat Report indicates a sustained rise in AI-driven attacks, to which traditional security measures are struggling to adapt. Most notable was the revelation that ‘infostealer’ malware now accounts for more than a quarter of malicious software. Data is valued by hackers, and it needs to be protected!
Basic software like a small business VPN can be extremely helpful in this struggle, especially for firms that rely on a distributed network of freelancers.
What the Latest Australian Data Says About AI-Enabled Cybercrime
So, what does the picture look like in Australia? According to the ASD Annual Cyber Threat Report, there were around 84,700 reported breaches in the year 2024-25. This amounts to around one report every six minutes. The average self-reported loss for every affected business was around $56,600, up around 14% over the previous year.
What’s more, according to CPA Australia’s Business Technology report, around 19% of businesses have reported losing time or money to attacks over a single year.
Using AI Securely: Guidance from the ACSC and Other Authorities
AI isn’t just a threat, but a tool. It can be used to unlock significant productivity gains, and even protect against AI-based attack vectors. In fact, the Australian Signals Directorate’s Australian Cyber Security Centre published its Engaging with Artificial Intelligence guidance in order to help businesses make this transition sensibly.
These guidelines should be regarded as a baseline, rather than a target. By following them, you’ll give your business a firm grounding in the fundamentals. Make sure that you’re using the right services and suppliers, and that your systems are overseen by qualified staff.
Practical Steps to Protect Your Business from AI-Driven Attacks
Formulating a plan of action is an essential first step toward AI-resilient security. Make sure that this plan includes strong access management and regular training that keeps pace with a rapidly changing sector. Reading the next editions of all of the reports we’ve mentioned here might also be very helpful!
