Trend Report

ANZ Threat Landscape Report, September 2026

Actionable threat intelligence on the threats, attack trends and adversaries shaping the Australia and New Zealand cybersecurity landscape in September 2026.

Fill out the form to access the full report

Who Must Read This Report

CISOs and security leaders across AUNZ who prioritise defensive investment against the threats actually hitting the region.
SOC and threat intelligence teams who need current tactics, techniques, and procedures (TTPs) mapped to MITRE ATT&CK.
Fraud and financial-crime teams at banks, fintechs, and payment providers tracking bank-card compromise, stealer logs, and large scale data-sale claims.
Government and critical infrastructure operators assessing nation-state and OT-focused hacktivist activity.
Risk, compliance, and board stakeholders who need an evidence-based read on regional cyber risk and its regulatory implications.

Key highlights for the page:

85 threat events across Australia and New Zealand, up from 64 in August

Database sale and leak claims doubled to 39 events, the largest category this month

34 ransomware events; Storm Ransomware, Qilin and The Gentlemen most active

717,399 compromised account records (+465% MoM) and 25,466 compromised bank cards (+372.56% MoM)

Initial access broker listings returned: 7 listings after none in August

Adversary of the Month: Qilin, a Rust-based RaaS operation targeting Australian businesses