Many companies have begun to use remote desktops to allow their employees to work from home. While a way to allow for working out of the office in the event of snow or other out of control issues seem nice, companies are making themselves a bigger target for being hacked.
Malicious operators are always watching for potential vulnerabilities in any network. A laptop operating off network is an easy target. All hackers need to do is find a computer on a public network and then find the password for them to login. Remote access attacks are among the most common causes for cyber breaches because it's much easier to brute force a non-connected drive then one where a network is constantly on guard.
There are many small things that can be done to prevent such a breach. Dual factor authentication is normally a good deterrent, but the best way is to cut off remote access or limit ways of being accessed. Another way is the create a separate Virtual Personal Network or VPN that only your Dual Factor Authentication code can enter. You can also enable a firewall and only allow the specific IP addresses. Either way needs a DFA to properly work.[1]
None of this will matter if someone lets attackers into the system. Be vigilant on potential scams and fake emails. Review your cyber policies and test your knowledge to know what to look for.
[1] https://help.thecoalition.com/technical-help/what-is-remote-desktop-protocol-rdp
