Remote Password Guessing - Concerns, Observations, Recommendations, (Wed, Aug 1st)
   

As an organization's IT security practices mature, it gets better at protecting its network perimeter systems: the patches get applied more regularly, the firewall rules become more restrictive, the OS gets locked-down more rigorously. Even at such companies, authentication systems often lag behind. If the employees, partners, customers, vendors need to remotely access an application with logon screen that requires a password, two things will often hold true:

http://isc.sans.org/diary.php?storyid=3212&rss