The Attack Email Authentication Cannot See
A coalition took down Tycoon 2FA in March. Within weeks its signature technique had spread across the phishing-as-a-service market, in a form that never touches SPF, DKIM or DMARC. Here is why that belongs on the email industry’s desk, not only the security team’s. On 4 March 2026, Microsoft’s Digital Crimes Unit and Europol, working […]
