Surge in coordinated scans targets Microsoft RDP auth servers
From BleepingComputer to All on Mon Aug 25 20:14:19 2025
Internet intelligence firm GreyNoise reports that it has recorded a significant spike in scanning activity consisting of nearly 1,971 IP addresses probing Microsoft Remote Desktop Web Access and RDP Web Client authentication portals in unison, suggesting a coordinated reconnaissance campaign. [...]