Cybersecurity researchers at Elastic have issued a stark warning that should concern every home user, small business, and enterprise in Australia: AI-powered cyberattacks are now moving so fast that traditional security responses simply cannot keep up. Speaking at Elastic{ON} Sydney in March 2026, Elastic’s global general manager of security, Mike Nichols, revealed that attackers can now move from initial compromise to meaningful system impact in as little as 11 minutes.
“At this speed, manual playbooks are no longer just slow; they’re mathematically impossible,” Nichols warned.
For everyday Australians and businesses, this isn’t an abstract corporate IT problem. It is a direct and urgent signal that the way we think about protecting our computers, networks, and data needs to change — now.
What Elastic’s Research Actually Found?
Elastic’s findings, drawn from their 2025 Global Threat Report — based on analysis of more than one billion data points from real production environments — paint a sobering picture of how the threat landscape has shifted.
Generic threats, typically code loaders built using AI, jumped 15.5% in the past year, while malicious code execution on Windows nearly doubled to 32.5%. Put simply, AI is enabling cybercriminals to mass-produce attack tools that previously required significant skill and effort to build. The barrier to entry for launching a sophisticated attack has collapsed.
Adversaries are weaponising AI to lower the barrier to entry for cybercrime, with large language models being used to quickly generate simple but effective malicious code. At the same time, there was explosive growth in infostealers — now exceeding 25% of all malware detected — feeding stolen credentials to access broker networks.
For Windows users in particular, this is especially relevant. If your Windows machine isn’t properly protected, updated, and monitored, you are a far more attractive target than you were even twelve months ago. Our computer virus removal service and laptop virus removal team deal with the consequences of these kinds of infections regularly — and the pace at which they arrive has accelerated noticeably.
What “Shrinking Response Windows” Means in Plain English?
AI has reset the tempo of cybersecurity. Attackers can now automate reconnaissance, social engineering, and lateral movement, compressing the time between initial access and business impact. Cyberattacks that once unfolded over a week can now move across identity, cloud, and endpoint layers in a matter of hours, if not minutes.
In practice, this means: by the time a traditional antivirus tool flags something unusual, the damage may already be done. Ransomware may have encrypted your files. Credentials may have been stolen. Banking sessions may have been hijacked.
AI-powered ransomware has cut the median dwell time within a compromised network from 9 days down to 5 days, and credential theft driven by AI jumped 160% in 2025.
This is why ransomware data recovery has become one of the most requested services we handle — and why data backup and recovery is no longer optional for anyone who stores important files on their device. If you’d like to understand what ransomware is in more detail, our explainer on what is ransomware covers the essentials.
AI Is Being Used on Both Sides of the Battle
Elastic’s Nichols was careful to frame this as a two-sided contest. AI isn’t only a weapon for attackers — it is also becoming the most powerful tool available to defenders. AI can analyse large volumes of telemetry and automatically surface the most relevant threats for analysts to investigate, allowing security teams to focus on investigative work while AI handles repetitive tasks such as data correlation, alert aggregation, and initial triage.
However, there is an important caveat. Nichols cautioned against the idea that AI will replace security analysts altogether. “The first thing I always say is that AI is icing on the cake, not the entire cake. You still need a strong foundation first: processes, people and an architecture that works without AI. Then AI makes those systems better.”
“You can’t just place a large language model on top of your data and expect everything to work,” he said. “AI is fundamentally a data problem.”
This is a crucial point for home users and small businesses in Melbourne to internalise: AI-powered security tools are only as good as the underlying security foundations they sit on. If your antivirus is outdated, your passwords are weak, your backups are non-existent, and your operating system hasn’t been updated in months, no AI layer will save you.
The Threats You Need to Know About Right Now
Based on Elastic’s research and the broader cybersecurity landscape in 2026, here are the specific threat categories that should be on every Australian’s radar:
Infostealers and credential theft are now the dominant form of malware, designed to silently extract saved passwords, browser session data, banking credentials, and crypto wallet keys. They often arrive via phishing emails or malicious downloads. Our online banking virus removal service exists precisely because these attacks are becoming more common. You should also read our guide on phishing emails to understand how to spot them.
AI-generated malware is now sophisticated enough to evade many traditional signature-based antivirus tools. AI is reducing friction across the attack lifecycle, helping threat actors research faster, write better lures, generate malware, and triage stolen data. This is why antivirus installation and setup matters, but so does choosing the right tool — our guide on best antivirus for small businesses in Melbourne is worth reading.
Ransomware continues to be the attack most likely to cause catastrophic damage for individuals and businesses alike. Ransomware crews now seek to corrupt or encrypt backups before launching their final payload, which is why off-site and immutable backup copies are essential. If you’ve been affected, our ransomware data recovery and broader data recovery service can help.
AI-powered phishing is producing lures that are increasingly indistinguishable from legitimate communications. AI refines voice overlays, deepfakes, and message customisation using scraped data, producing phishing attempts that are increasingly difficult to distinguish from genuine contacts. Our guide on how to avoid scam emails and our deeper look at tech scams are essential reading. If you’ve received a suspicious call, our overview of phone scam calls in Australia covers the most common tactics being used right now.
Remote access scams remain a significant risk, particularly for seniors and small business owners. Our page on remote access scams explains what to watch for and what to do if you’ve been targeted.
What Does This Mean for Windows Users Specifically?
Adversary priorities on Windows are changing significantly. The tactic of Execution now accounts for nearly double its previous share and surpasses Defence Evasion as the top adversarial tactic for the first time. In other words, attackers are less concerned with hiding quietly on your system — they are now focused on executing malicious code as quickly and aggressively as possible.
For Windows users, this makes a few things critical. First, keeping your operating system current is non-negotiable. Our Windows 11 upgrade service can help if you’re still on an older version, and our guide on upgrading to Windows 11 walks you through what is involved. If your PC crashed after a recent Windows update, our PC crashing after Windows update guide covers the most common causes and fixes.
Second, a slow or ageing PC makes you more vulnerable, not less — old systems often can’t run current security tools effectively. Our frozen computer crash repair and slow computer speed-up service can bring your machine back to a state where modern security tools can run properly. It’s also worth considering whether a laptop RAM upgrade or SSD upgrade might be more cost-effective than buying new.
What Small Businesses in Melbourne Must Do?
For small and medium businesses, the Elastic findings are particularly sobering. Over 60% of all cloud security events come down to just three adversary goals: Initial Access, Persistence, and Credential Access. This means attackers are primarily trying to get a foot in the door, stay there, and steal credentials — three goals that good foundational security can significantly disrupt.
Elastic’s Nichols put it plainly: you need good processes and people in place before AI tools can help. For most small businesses, that means starting with the basics: cybersecurity solutions that cover your endpoints, proper email protection through email spam filtering, and a credible backups and disaster recovery plan that keeps copies of your data somewhere ransomware can’t reach.
Our small business IT support team works with businesses across Melbourne to put exactly these kinds of foundations in place. We also offer IT health check and audit services that identify gaps before attackers find them — and our managed IT services provide ongoing monitoring so you’re not relying on reactive responses alone.
Our guide on protecting your business from cyber threats covers the practical steps, and our deeper look at cybersecurity mistakes that could cost your business highlights the most common errors we see in the field.
The Password and Credential Problem
One of Elastic’s most significant findings concerns how credential theft has become the primary gateway for attackers. There was explosive growth in infostealers, now exceeding 25% of malware detected, feeding credentials to robust access broker networks. Access brokers then sell these stolen credentials to other criminal groups who use them to launch follow-on attacks.
For everyday users, this means your saved browser passwords, your email credentials, and your banking logins are a primary target. Multi-factor authentication (MFA) is one of the most effective countermeasures available — our guide on multi-factor authentication explains how it works and how to set it up. Using a password manager is equally important, as is understanding how to protect yourself from being hacked.
If you suspect your credentials have already been compromised, our guides on what to do if your email gets hacked, what to do if your business gets hacked, and what to do if you have been hacked outline the immediate steps to take.
Is Your Computer Ready for the AI Threat Era?
Elastic’s research makes one thing absolutely clear: the window between an attacker gaining access and causing serious damage is shrinking by the month. Waiting until something goes wrong is no longer a viable approach. Our guide on whether your computer is ready for AI looks at this from a hardware and software readiness perspective.
The good news is that the defensive fundamentals have not changed dramatically, even if the speed of attacks has. Regular software updates, strong and unique passwords backed by MFA, reliable backups stored off-site, reputable antivirus software, and professional IT support are still the most effective defences available to most Australians — and they remain achievable for homes and small businesses alike.
If you’re not sure where your vulnerabilities lie, our IT consulting team can assess your current setup and give you a clear, practical action plan. For businesses that need ongoing monitoring and response capability, our managed IT services and online IT support options provide exactly that — and our remote vs onsite IT support guide can help you decide which model suits your situation best.
Conclusion
AI is now a core part of how cybercriminals operate, enabling faster, cheaper, and more convincing attacks than ever before. Elastic’s data shows that attackers can move from initial access to damaging impact in as little as 11 minutes. Infostealers, AI-generated malware, ransomware, and AI-powered phishing are the dominant threat categories right now.
Windows users face a particularly heightened risk as malicious code execution on that platform has nearly doubled. The fundamentals — updated software, strong credentials, MFA, robust backups, and professional IT support — remain the most effective defence. For small businesses, managed IT services and regular security audits are now a baseline necessity, not a luxury.
