Impersonating IT support: how threat actors turn a remote session into enterprise-wide access | Microsoft Security Blog
https://www.microsoft.com/en-us/security/blog/2026/09/02/impersonating-it-support-threat-actors-turn-remote-session-into-enterprise-wide-access/