tech
Unpatched Legacy Software Behind 30 Per Cent of Major Business Cyber Incidents
ESET report finds unpatched legacy software behind 30 per cent of major business cyber incidents.
Key points
- ESET found unpatched software and legacy technology caused 30 per cent of major cyber security incidents in businesses, peaking at one in
- The Australian Signals Directorate said average self-reported cybercrime cost per business rose 16 per cent to $93,500.
- The ASD said 'Time to Exploit' narrowed from months to hours or days, letting attackers weaponise newly disclosed software flaws.
Why it matters. Small businesses' limited resources could threaten the national economy if their exposure to cyber threats remains high, Mr Muller said.
ESET's Enterprise Cybersecurity Report 2026 found legacy technology caused 30 per cent of major incidents at Australian businesses, peaking at one in two in telecom. The survey of 400 organisations found 72 per cent of Australian businesses suffered a major security incident, and about two-thirds faced at least one AI-related threat. Ionize chief executive Andrew Muller said small businesses are not resourced to respond.
Latest updates
Unpatched Legacy Software Behind 30 Per Cent of Major Business Cyber Incidents
ESET research found that unpatched software and legacy technology caused 30 per cent of all major cyber security incidents in businesses. The figure peaks at one in two in the telecommunications and utilities sector and reaches 48 per cent in retail. The findings were reported by The Canberra Times on November 1, 2026. The report highlights a gap between federal cyber security policy and the daily realities faced by small businesses in Australia. Concern is growing about AI-driven cyber threats, though the report's specific recommendations were not detailed in the available excerpt.