National security is a game of shifting probabilities. When you run a domestic spy agency, you have to decide which threat gets the cash, the agents, and the surveillance tech. If you guess wrong, people die.
That stark reality hit home during a tense government inquiry in Australia. Mike Burgess, the Director-General of the Australian Security Intelligence Organisation (ASIO), took the stand to explain why his agency moved vital resources away from counterterrorism in the years leading up to the nation’s worst mass shooting in decades.
On December 14, 2025, two Islamic State-inspired gunmen opened fire on a crowd of 1,000 people celebrating Hanukkah at Sydney’s iconic Bondi Beach. Fifteen people were killed. Ten of them died within the first 29 seconds of the assault. The details emerging from the Royal Commission on Antisemitism and Social Cohesion reveal a devastating mismatch between bureaucratic threat assessments and the reality on the ground.
The Quiet Pivot That Cost Australia Dearly
Bureaucrats love data points. In November 2022, ASIO looked at the Middle East, saw the territorial defeat of the Islamic State group, and noticed a drop in active domestic terror investigations. The agency decided the environment had changed. They officially lowered Australia’s National Terrorism Threat Level from "probable" to "possible."
With that single administrative pen stroke, the focus shifted.
Burgess testified that every time his agents lifted a rock, they found foreign interference and espionage. Foreign governments were meddling in Australian institutions, and foreign spies were operating on local soil. The spy chief decided to chase the spies. He pivoted personnel and funding away from tracking religious extremists to hunt down foreign state actors instead.
Burgess insisted that the counterterrorism division retained sufficient resources to do its job. He argued that because terrorism risks lives, it remained a priority, but there was simply less activity on their radar at the time.
That calculation proved catastrophic. While the agency looked for foreign spies, domestic extremism quietly rebuilt itself in the shadows.
Warning Signs and Broken Security Chains
The tragedy didn't happen in a vacuum. Burgess admitted he knew the social climate was fracturing. Five days after the October 7, 2023, attacks in Israel, he took the rare step of publicly warning that inflamed local political language could lead to real-world violence.
Throughout late 2023 and into 2024, ASIO tracked escalating intimidation directed at Jewish Australians in New South Wales, Victoria, and Queensland. By October 2024, attackers were actively targeting Jewish businesses and places of worship. The intelligence community felt the ground shaking. They even bumped the national terror threat level back up to "probable" in August 2024.
Yet, when the "Chanukah by the Sea" festival kicked off at Bondi Beach, the bureaucratic machinery failed to protect the public.
The Community Security Group, a Jewish safety organization, begged the New South Wales Police Force to station dedicated officers at the beachfront park for the duration of the event. They knew the risk was sky-high.
The police didn't listen. Local commanders gave the Hanukkah celebration the lowest security priority on a three-tier scale. Instead of standing guard, police officers were told to just drop by from time to time.
When the father-and-son duo of Sajid and Naveed Akram marched onto the beach with handmade Islamic State flags and semi-automatic weapons, exactly four police officers were on site.
A Surprise Attack Born From Predictable Blindspots
Senior Counsel Assisting the Royal Commission, Richard Lancaster, stated bluntly that no law enforcement or intelligence agency had specific info suggesting an armed attack on that beach. It was a surprise attack.
But a surprise attack happens when you don't look closely enough. An interim report from the inquiry dropped a bombshell: counterterrorism funding had steadily declined inside the intelligence community, even though overall intelligence budgets surged by 31 percent. Money was pouring into the spy world, but it was being funneled into cyber operations, geopolitics, and foreign interference defense. The actual boots on the ground tracking local radicals were stripped of their financial backing.
Former ASIO boss Dennis Richardson publicly questioned whether the intelligence assessments regarding the Akram gunmen were rigorous enough before the tragedy. The older gunman died in the subsequent shootout with police, while the son faces a massive trial involving 15 counts of murder.
The security apparatus treated Hanukkah as a low-risk community gathering. Meanwhile, major Jewish high holy days in September and October received top-tier protection managed by elite paramilitary counterterrorism squads. The terrorists simply waited for the calendar to turn to December, found the softest target imaginable, and struck.
Fixing the Intelligence Blindspots
You can't secure a nation by treating security like a zero-sum game where counterespionage and counterterrorism fight for the same pool of field agents. When agencies prioritize state-sponsored spying over domestic radicalization, lone actors and small cells find the gaps in the fence.
Relying on a five-tier public threat system creates a false sense of security for local police departments. When the threat level fluctuates, local police commanders alter their staffing levels based on spreadsheets rather than local cultural anxieties.
Security agencies must reallocate baseline funding back to community-level threat tracking. No matter how pressing foreign cyber threats become, the physical protection of public spaces cannot be sacrificed.
Local police forces must overhaul how they evaluate minority community events during times of international tension. If a community security group flags a threat, that warning needs to bypass local command and go straight to specialized major event groups.
Governments must force intelligence agencies to maintain strict funding firewalls. Budgets meant for monitoring domestic extremist threats shouldn't be raided to fund high-tech geopolitical espionage operations, no matter how appealing those missions look to the top brass.
