The Australian Signals Directorate's Annual Cyber Threat Report 2025-26 shows each cybercrime now costs a medium-sized business $141,300 on average, up 45% in a year. That is close to the $148,100 it costs a large company, which usually has its own security team.
ASD says AI has been the defining force in the cyber threat landscape over the past year. Defenders who once had months to fix a flaw now have days, sometimes only hours. And in about one in four of the incidents ASD responded to, the organisation only found out it was under attack because ASD told it.
Our article sets out what the report means for mid-sized organisations, five things to fix this month, and three questions to ask your board.
Read more briefings in the Cyber Brief.
