Remote access remains top security blackspot