spacer

Exposed Terminal Services Remains High Frequency Threat

Submitted by l33tdawg on Fri, 2012-09-07 01:34
  • Tweet
  • spacer
    Credit: Wikipedia

    Quickly reviewing the HITME data gathered from our global deployment of HoneyPoint continues to show that exposed Terminal Services (RDP) on port 3389 remains a high frequency threat.

    In terms of general contact with the attack surface of an exposed Terminal Server connection, direct probes and attacker interaction is seen on an average approximately two times per hour.

    Given that metric, an organization who is using exposed Terminal Services for remote access or management/support, may be experiencing upwards of 48 attacks per day against their exposed remote access tool. In many cases, when we conduct penetration testing of organizations using Terminal Services in this manner, remote compromise of that service is found to lead to high levels of access to the organization’s data, if not complete control of their systems.

    Source: 
    Infosec Island
    Tags: 
    Security
    Microsoft
    • Log in or register to post comments
    • 1442 reads

     

    You May Also Like

    • spacer
      Microsoft to patch 19 vulnerabilities on Tuesday
      Thu, 2012-11-08 23:44
    • spacer
      Vupen claims to have found zero day Windows 8 exploit
      Thu, 2012-11-01 23:03
    • spacer
      Microsoft's picture-password ad: Intriguing or confusing?
      Mon, 2012-10-29 04:55
    Loading...