Fujitsu launches cyber defence strategy after AI attacks

Fujitsu has launched a global Cyber Defence Lifecycle Strategy in response to a sharp rise in AI-enabled cyberattacks.

The strategy positions cyber security as a continuous process spanning planning, design, implementation, operations, evaluation and improvement, rather than a control added after systems are built. Fujitsu will use the model to expand cyber services including a virtual Cyber Security Nerve Centre, AI-based vulnerability assessment, AI Threat Hunting and AI Red Team operations.

The announcement follows Fujitsu's Sector-on-Sector Cyber Threat Comparison Report, which found AI-enabled cyberattacks rose 89% year on year. Organisations in Australia and New Zealand are facing more sophisticated intrusions, including identity-based attacks that can evade traditional controls, according to the company.

Lifecycle model

At the centre of the plan is what Fujitsu calls a Cyber Defence Operations Model, which defines how an organisation builds, runs and improves its cyber defences. A related Cyber Defence Framework is intended to apply that model across enterprise environments.

The approach is designed to give organisations a clearer view of the gap between their current security posture and the level of defence required as threats evolve. The model covers not only internal IT systems, but also broader operational environments and supply chain relationships.

One element is a Cyber Nerve System, designed to detect threats and risks from data generated through the framework and present the results for analysis. Fujitsu says the system is intended to provide a shared operational picture and support faster decision-making within security teams.

A virtual Cyber Security Nerve Centre will sit above that system as a global coordination function. Fujitsu says the unit will have about 100 members and will use assessments from the Cyber Nerve System to report to management and advise on issues such as system shutdowns, cyber defence priorities and investment choices.

Regional focus

In Australia and New Zealand, the new global strategy will build on Fujitsu's existing local cyber practice by linking regional teams with global research, service development and threat intelligence structures. The company says it will continue to support sovereign delivery requirements where needed.

The regional emphasis reflects a broader shift in how organisations are being targeted. Fujitsu says attackers are increasingly using generative AI to identify weaknesses, analyse attack paths, generate malicious code and move through internal systems more quickly than before.

At the same time, enterprise environments are becoming more complex as businesses adopt cloud services, share data with external parties and connect systems across supply chains. Fujitsu says that expansion has increased the number of systems and partners that must be treated as part of an organisation's defensive perimeter.

Advanced services

Fujitsu plans to evaluate and integrate technologies from its research teams, internal service development units and external partners before deploying selected functions to customers. Those services are expected to include AI-assisted vulnerability assessment, AI Threat Hunting and AI Red Team Operations.

It also described a concept it calls deceleration defence, which aims to slow attackers rather than rely solely on stopping intrusions outright. In practice, the idea is to create more time for defenders to observe behaviour and apply additional countermeasures once an incident begins.

The framework also divides cyber defence into several layers, including the assets being protected, the philosophy behind defences, responsibilities shared with partners and group companies, and the level of protection needed depending on how close an attacker is to a target. Fujitsu says these models are intended to help organisations set priorities and direct spending.

Alongside technology changes, the company says it will expand specialist workforce development through its Security Meister programme. The training is intended to prepare roles such as white hat hackers and Security Architects using lessons drawn from Fujitsu's internal operations and customer work.

James Richmond, Head of Cyber Security for Oceania at Fujitsu, outlined the regional view on the changing threat environment.

"The nature of cyber threats continues to evolve. Adversaries are now using AI and identity-based attacks that bypass traditional defences, which is why a new approach is critical. For leaders in Australia and New Zealand, this means shifting from point-in-time security to a model of continuous, threat-informed cyber resilience. Fujitsu's global Cyber Defence Lifecycle strategy provides a powerful framework that enhances the sovereign capabilities our local team already delivers, giving leaders the evidence and confidence they need to protect their critical services and innovate safely in this new era," Richmond said.