According to the ACSC Annual Cyber Threat Report 2024–25, the most common cyber threats affecting Australian businesses include phishing and other social-engineering scams, ransomware and other forms of malware, business email compromise, and attacks that exploit unpatched or misconfigured internet-facing systems. The Essential Eight and layered security controls are designed to reduce the likelihood and impact of these threats.