Authorities pull plug on Tycoon 2FA phishing-as-a-service platform
2026-03-05T08:51:56Z•3387f0852e91c32dd1ea8198efe0f48fcc23f693e55647dc4c308f57ea370d8e
CVE-2025-14500agentic-agentsagentic-browserai-agentsdigital.aihuman-reviewersicewarplaw-enforcement-takedownmeta-ray-banmfa-bypassmobile-app-protectionperplexedbrowserperplexity-cometphishingphishing-as-a-servicepleasefixprivacyrcesupply-chainthird-party-risktufintycoon-2favendor-managementvulnerability
What happened
This collection covers multiple high-impact security stories: law enforcement disrupted Tycoon 2FA, a large phishing-as-a-service platform that enabled MFA bypass and accounted for a large portion of global phishing; Zenity Labs disclosed PleaseFix/PerplexedBrowser critical flaws in agentic browsers (e.g., Perplexity Comet) that can hijack AI agents, access local files, and steal credentials; a critical unauthenticated RCE in IceWarp (CVE-2025-14500) leaves over 1,200 internet-facing servers exposed; and a privacy investigation found human contractors reviewing sensitive Meta Ray‑Ban smart‑gls
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 3387f0852e91c32dd1ea8198efe0f48fcc23f693e55647dc4c308f57ea370d8e
- Enrichment time
- 2026-03-05T08:51:56Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.