PhantomRPC is an architectural weakness in the Windows Remote Procedure Call (RPC) runtime that allows low-privileged processes to escalate to SYSTEM or Administrator by impersonating privileged clients. Disclosed by Kaspersky’s Haidar Kabibo at Black Hat Asia 2026, the flaw stems from how rpcrt4.dll handles connections to unavailable RPC servers: when a privileged process attempts an RPC call to a server
Category: Microsoft
Windows, Windows Server, Microsoft 365, Word, Excel, PowerPoint, Outlook, OneNote, Teams, SharePoint, OneDrive, Edge, Bing, SQL Server, Visual Studio, Active Directory, Dynamics 365, Power BI, Power Apps, Xbox, Game Pass, Surface, Intune, Defender, Exchange, Hyper-V, .NET, Dataverse, Microsoft Copilot, Copilot Studio, Microsoft Fabric, Power Platform, Windows 11, Windows 10, WSL, Windows Subsystem for Linux
Hackers Leverage Microsoft Teams to Breach Organizations: Inside UNC6692’s SNOW Campaign
In late 2025 and into early 2026, a sophisticated intrusion campaign used the everyday familiarity of Microsoft Teams to turn routine collaboration into a direct route for enterprise compromise. By posing as IT helpdesk staff and exploiting users’ trust in external Teams invitations, the threat group tracked as UNC6692 moved from a simple chat message to full domain-level access—without exploiting
Microsoft’s First Voluntary Retirement Offer: What Employees and the Industry Need to Know
Microsoft has quietly opened a new chapter in its approach to workforce management: for the first time in the company’s 51-year history, it is offering a one-time voluntary retirement program to thousands of long-serving U.S. employees. Announced in an internal memo from Chief People Officer Amy Coleman, the move gives eligible employees the option to leave with a financial payout
Microsoft Teams’ Efficiency Mode Arrives for Low‑End Devices
Microsoft is rolling out an Efficiency Mode for Microsoft Teams designed to help devices with limited CPU and memory run the app more smoothly. Announced in a Microsoft message center update, the feature will be enabled by default on eligible hardware and aims to improve responsiveness and meeting quality by dynamically adjusting how Teams uses system resources. What Efficiency Mode
Anthropic and Amazon Expand Partnership, Securing Up to 5GW of Compute for Claude
Anthropic announced on April 20, 2026, a major expansion of its collaboration with Amazon that will secure up to 5 gigawatts (GW) of new compute capacity to train and deploy Claude. The agreement accelerates capacity coming online this year and ties together deeper infrastructure, platform integration, and additional capital investment — steps Anthropic says are needed to meet surging customer
How Attackers Abuse Microsoft Teams and Quick Assist: Inside the Helpdesk Impersonation Playbook
A new wave of attacks is quietly abusing everyday collaboration tools to bypass user suspicion and gain hands-on control of corporate endpoints. Threat actors are impersonating internal IT helpdesk staff inside Microsoft Teams, convincing employees to grant remote access via Quick Assist, and then using that live access to deploy stealthy persistence mechanisms and move laterally through enterprise networks. Because