Almost no big company is using Win10. Its way too early for its adoption. Even then, they&#x27;d have a domain policy that requires passwords and the RDP group would also be controlled by GPO. Even then, they&#x27;d be using VPN or Remote Desktop Gateway to run this, not opening thousands of ports 3389 and one-to-one natting them to desktop machines. I could see small ma&amp;pop companies vulnerable to this, but they&#x27;re probably vulnerable to a host of things. Most small shops I&#x27;ve worked with have no idea what RDP is anyway, and use third party remote products, if any.<p>Is exploit code out there? If not, then that&#x27;s quite a leap yet for hackers. In a week or two every win10 machine in the world will have this patched. That&#x27;s a very short window for what looks like to be an ugly, but tiny edge case.<p>This is further evidence that Win10 is far from fully cooked. We&#x27;re not touching it until 2018 with preliminary testing starting in 2017.  MS rushed this pretty badly after the poor reception to 8. Also further evidence that remote technologies like ssh, rdp, etc should always be wrapped in something else like VPN or at least strictly firewalled off to known good IPs.  Surprises happen.