02/11/2026
AUD 141,300.
That is the average self-reported cost of a cybercrime for a medium-sized Australian business, according to the Australian Signals Directorate's new Annual Cyber Threat Report. It is up 45% from last year.
The report, released last week, names AI as the defining force in the threat landscape. Attackers are using it to find weak spots faster and at a scale we have not seen before.
And where do they find them? Very often, in old systems.
The report calls out legacy technology as one of the biggest openings. One example: attackers successfully exploited a flaw first identified back in 2008.
Here is the uncomfortable part. AI does not make old software weaker. It makes old software easier to find.
So the most useful thing you can do this week is not buy a new tool. It is to make a list:
📋 Every system your business relies on
🕰 Which ones no longer get security updates
🌐 Which of those are reachable from the internet
That list is where your real risk lives.
What is the oldest piece of software your business still relies on? Just the year is fine, no judgement 👇