The system has not been updated with patches, making many Vietnamese businesses vulnerable to cyber attacks.

If not promptly fixed, vulnerabilities such as exploit attacks will become an “open door” for cyber attackers to take control of business data and resources.

The latest data released by security firm Kaspersky on October 14 shows that many security holes in Vietnamese business networks have yet to be fixed. This situation makes businesses continue to be in the sights of cybercriminals.

Accordingly, in the first half of 2025, Kaspersky prevented more than 301,880 vulnerability exploitation attacks targeting businesses in Vietnam.

During the same period, Indonesia recorded the highest number of exploits in Southeast Asia with 524,657, followed by Vietnam and Malaysia with 190,556. Other countries in the region had significantly lower numbers, including Thailand with 88,966, the Philippines with 50,895 and Singapore with 38,719.

Exploit attack is a form of cyber attack that takes advantage of security vulnerabilities, software or operating system errors to illegally penetrate the system.

If not fixed promptly, these vulnerabilities will become an “open door” for attackers to take control of business data and resources.

According to another Kaspersky report, in Q2 2025, most of the unpatched vulnerabilities in Microsoft Office products were the common targets of exploit attacks globally. Kaspersky also recorded a number of attacks targeting the Windows platform, focusing on vulnerabilities such as CVE-2018-0802; CVE-2017-11882 and CVE-2017-0199

The report also identifies the top 10 most exploited vulnerabilities by hackers, including new and old zero-day vulnerabilities, and issues that have not been patched but continue to be overlooked by businesses during operations.

Zero-day vulnerabilities are software flaws that are exploited by hackers before the software developer has time to detect and release an official security patch. This makes them a highly successful target for cybercriminals.

Another finding from Kaspersky shows that in the first half of 2025, businesses in Thailand faced 2,524,439 cyber threats.

Next are Malaysia and Indonesia with 1,703,788 and 1,626,984 incidents respectively. Vietnam is lower in the rankings with a total of 1,174,407 cyber threats, while Singapore and the Philippines recorded 470,758 and 334,565 incidents respectively.

In light of the above situation, Kaspersky recommends that businesses should conduct security vulnerability checks and analysis in a secure virtual environment, avoiding direct operations on real systems; ensure 24/7 system monitoring, paying special attention to perimeter defenses of the corporate network; regularly update security software and deploy reliable security solutions./.

Source: https://www.vietnamplus.vn/he-thong-chua-cap-nhat-ban-va-khien-nhieu-doanh-nghiep-viet-de-bi-tan-cong-mang-post1070260.vnp