23% of banks had at least one misconfigured database exposed to the internet resulting in potential data leakage issues 54% of the banks had at least one RDP exposed to the internet 31% of banks had at least one vulnerability to Remote Code Execution Multiple unsecured FTP servers with anonymous authentication were discovered The myriad of exposures such as RDP, unsecured FTP and misconfigured development tools can be leveraged by attackers to gain unauthorized access to banks’ internal networks and result in data breach attacks. The exposed databases which were discovered place customer and other sensitive data at direct and imminent risk of exposure.

Read full article on Help Net Security