Cartriona Robinson, head of the National Cyber Security Centre. Photo \/ Alex Burton<\/p>\n
National Cyber Security Centre (NCSC) head Catriona Robinson said cyber security was a critical consideration for every New Zealand business.<\/p>\n
\u201cThe cyber threat landscape is changing faster than ever. Alongside familiar threats from cyber criminals and state actors, businesses and organisations face a powerful new disruptor in the form of frontier artificial intelligence,\u201d Robinson said.<\/p>\n
\u201cWe are also seeing new types of threat emerge, including that of a North Korean IT worker clandestinely obtaining remote IT work with a New Zealand business in order to earn foreign currency for the North Korean state. <\/p>\n
\u201cThis kind of activity is subject to United Nations sanctions which have effect under New Zealand law and also creates risks of espionage and extortion for businesses that are targeted.\u201d<\/p>\n
Robinson said AI offered many opportunities, but the technology was already being used to increase the speed, scale and sophistication of cyber attacks.<\/p>\n
She suggested the next generation of frontier AI models could automate attacks, identify vulnerabilities and enable highly personalised targeting of organisations and individuals.<\/p>\n
The threat of attacks is growing in New Zealand, with 369 incidents of potential national significance handled by the NCSC during the 2025-26 year.<\/p>\n
Of that figure, 162 were linked to criminal or financially motivated actors, an 18% increase on the previous year.<\/p>\n
\u201cThe severity of incidents has increased. During 2025\/26 the NCSC recorded four incidents classified as C2, or Highly Significant. That\u2019s as many in one year as were recorded over the previous 10 years.\u201d<\/p>\n
The report notes AI is also becoming part of the cyber crime toolkit, enabling more convincing phishing campaigns, scams and social engineering attacks. <\/p>\n
It concluded that strong cyber security fundamentals remain the best defence against human and AI-enabled threats.<\/p>\n
Robinson said the Government couldn\u2019t protect every organisation from every cyber threat, and leaders who prepare now would be best placed to manage the challenges.<\/p>\n
\u201cCyber crime has evolved into an industrialised global industry. Cyber criminals are becoming more persistent, aggressive and effective in their pursuit of payment through extortion and data theft.<\/p>\n
\u201cBoards, chief executives and senior leaders need to consider whether their businesses or organisations have the people, processes and resources needed to respond to a faster-moving cyber threat environment.\u201d<\/p>\n