2022-2023 Cyber Threat Trends for Critical Infrastructure

This document is a report detailing the cyber threat trends affecting critical infrastructure in Australia for the financial year 2022-2023. It presents data indicating an increase in calls to the Australian Cyber Security Hotline, with over 33,000 calls received, marking a 32% rise from the previous year. The report identifies the top sectors reporting cyber incidents, with the federal government being the most affected at 30.7%. The three primary types of incidents reported include compromised accounts or credentials, compromised assets, networks, and infrastructure, and denial-of-service attacks. The report emphasizes that malicious cyber activity targeting critical infrastructure is likely to grow, influenced by global events such as the war in Ukraine. It outlines recommendations for critical infrastructure entities, including adherence to best practice cybersecurity measures and the importance of understanding and securing their networks. The document also mentions various programs offered by the Australian Cyber Security Centre to enhance the cyber resilience of critical infrastructure.