What causes ISPs to be vulnerable to cyber threats?

System Misconfigurations.
Out-of-date or Unpatched Software.
Missing or Weak Authorization Credentials.
Malicious Insider Threats.
Missing or Poor Data Encryption.
Zero-day Vulnerabilities.