Malaysian businesses are facing an alarming rise in cyber threats, with over 1,050 exploit attacks occurring daily in the first half of 2025, according to Kaspersky. This marks a 16% increase from the previous year, as the country’s digital infrastructure continues to expand. The cybersecurity firm emphasises the importance of patching systems to protect against these vulnerabilities, which leave enterprises exposed to potential cyberattacks.
Kaspersky’s data reveals that Malaysia ranks third in Southeast Asia for exploit volume, trailing behind Indonesia and Vietnam. Exploits, malicious programmes that exploit software vulnerabilities, pose significant risks when systems remain unpatched. Globally, the most common exploits targeted unpatched Microsoft Office products, with vulnerabilities such as CVE-2018-0802 and CVE-2017-11882 being frequently exploited.
The report highlights that both new zero-day vulnerabilities and older, overlooked issues are being targeted by cybercriminals. Notably, attackers are also focusing on low-code/no-code platforms and AI-powered applications, as businesses increasingly adopt these technologies. Adrian Hia, Managing Director for Asia Pacific at Kaspersky, warns, “A 16% jump in exploit attempts against Malaysian businesses in just six months highlights how relentless these attackers have become.”
In addition to exploit attacks, Malaysian companies encountered over 1.7 million B2B web threats in the first half of 2025, making it the second most targeted country in Southeast Asia. To combat these threats, Kaspersky advises businesses to maintain robust patch management, deploy reliable security solutions, and utilise the latest threat intelligence.
As Malaysia’s digital economy grows, strengthening cybersecurity measures is crucial to safeguarding its digital progress and maintaining trust in its digital infrastructure.
