Over a two-week period, the computer networks at more than half of the Fortune 500 left a remote access protocol dangerously exposed to the internet, something many experts warn should never happen, according to new research by the security firm Expanse and 451 research.

Why it matters: According to Coveware, more than 60% of ransomware is installed via a Windows remote access feature called Remote Desktop Protocol (RDP). It's a protocol that's fine in secure environments but once exposed to the open internet can, at its best, allow attackers to disrupt access and, at its worst, be vulnerable to hacking itself.

What is RDP: RDP is a way of offering virtual access to a single computer. It allows, for example, an IT staffer in one office to provide tech support for a baffled user in a different office.

  • But RDP is best used over a secured network rather than over the open internet.
  • "We compare exposed RDP to leaving a computer attached to your network out on your lawn," Matt Kraning, co-founder and CTO of Expanse, told Axios.
  • It's an opinion shared by experts at McAfee and Sophos, who note that in the absence of multifactor authentication, the protocol can often be hacked into with only a few hours guessing common passwords.
  • Even in ideal circumstances, when passwords are strong, a malicious actor could overwhelm an RDP connection with traffic (known as a DDoS attack).

What they found: The Expanse/451 study found that 53.4% of Fortune 500 companies had an RDP exposure over a two-week period scanning for open RDP ports.

  • The technical sophistication of the companies didn't seem to have much impact on RDP exposures. For example, around 80% of hospitality industry companies and just under 80% of defense and aerospace companies had at least one exposure, even though defense and aerospace are among the most security-conscious sectors.
  • Cybersecurity budget, either as a percentage of the annual budget or total spending, also had no consistent effect on exposure. By percentage of budget, 43% of companies in the lowest-spending quartile had exposures, compared to 53% of those in the top spending quartile.

The bottom line: The threat of RDP exposures often fly under the radar. "IT staffs are really good at looking at what they know about, but not at what they don’t," said Kraning.

  • "If Fortune 500 companies have exposures, what chance do smaller companies have," he added.

Go deeper:

Go deeper

Ben Geman, author of Generate
7 mins ago - Economy & Business

GM dives full-throttle into electric

GMC Hummer EV. Photo courtesy of General Motors

What has LeBron James as a pitchman, some slightly awkward promotional phrasing ("watts to freedom"), and a six-figure starting price? The electric GMC Hummer.

Driving the news: General Motors unveiled the vehicle — a reborn version of the deceased mega-guzzler — with a highly produced rollout Tuesday night that included a World Series spot. The company also began taking reservations.

Updated 55 mins ago - Politics & Policy

Coronavirus dashboard

Illustration: Aïda Amer/Axios

  1. Politics: McConnell urges White House not to strike stimulus deal before election — Republican senators defend Fauci as Trump escalates attacks.
  2. Economy: Why the stimulus delay isn't a crisis (yet).
  3. Health: Studies show drop in COVID death rate — The next wave is gaining steam — The overwhelming aftershocks of the pandemic.
  4. Education: Schools haven't become hotspots.
Dion Rabouin, author of Markets
2 hours ago - Economy & Business

CEO confidence skyrockets on expectations of layoffs and wage cuts

U.S. consumers remain uncertain about the economic environment but CEOs are feeling incredibly confident, the latest survey from the Conference Board shows.

Why it matters: Confidence among chief executives jumped 19 points from its last reading in July, rising above the 50-point threshold that reflects more positive than negative responses for the first time since 2018.

Get Axios AM in your inbox

Catch up on coronavirus stories and special reports, curated by Mike Allen everyday

Please enter a valid email.

Subscription failed
Thank you for subscribing!