That week I found 38 open RDP ports on a single office network in Tulsa
I walked into a small law firm's network audit last spring and within two hours I had 38 machines with Remote Desktop exposed to the internet. No VPN, no multi-factor, just passwords like 'Legacy2022' sitting there. The receptionist's PC even had a sticky note on the monitor with the admin login. How do you even begin to explain that risk to people who think antivirus is enough?