According to Bi.Zone EASM, 22% of Russian companies have database services exposed to the public internet as of early 2026. Experts note that such placement increases the risk of data leaks and potential server compromise, especially when vulnerable software versions are in use.
The study also highlights that 18% of companies have Remote Desktop Protocol (RDP) services accessible externally, creating risks of credential stuffing or unauthorized access. Additionally, 15% of organizations expose the SMB protocol, and 6% leave LDAP services open to the internet.
Between July and September 2026, researchers identified 90,000 systems in the Russian internet segment with active remote access services vulnerable to Microsoft Remote Desktop Services exploits. These vulnerabilities allow attackers to execute arbitrary code without user interaction.
Security specialists recommend regular monitoring of the external perimeter to identify and disable unnecessary services. For essential tools, companies should restrict access and ensure timely software updates to mitigate the risk of network reconnaissance and privilege escalation.
