The Annual Cyber Threat Report 2024-2025 from the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) underscores the blurred lines between state-sponsored hackers and financially motivated cybercriminals. A key focus is on a threat actor backed by China, known by various names including Kryptonite Panda and Leviathan, which targets Australian and regional networks for valuable information. These state-backed actors often employ tactics similar to those used by criminal entities, posing significant threats to government and critical infrastructure networks. Also highlighted was the convergence of tactics used by different cyber threat actors, emphasizing the need for enhanced defense strategies rooted in threat intelligence and incident response. The ACSC advises organizations to strengthen their defenses with multifactor authentication, unique passwords, regular backups, and timely patching, as these measures can prevent most incidents. Additionally, the report notes the increasing use of AI by less sophisticated cybercriminals to automate phishing campaigns, analyze stolen data, and orchestrate denial-of-service (DoS) attacks. Organizations are urged to invest in adaptive, intelligent security controls to combat AI-enabled threats. Ransomware remains a major threat to Australian companies and to the world, with Australian costs rising by 219% for large businesses.