Skip to content
Product
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Public IOC feed
Free blocklists: domains, IPs, hashes, wallets. No key.
Dark web
First-party leak-site collection: victims and groups.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
Docs
Pricing
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Public IOC feed
Dark web
CLI & agents
Docs
Pricing
Contact
Get a free key
Sign in
Back
PleaseFix
Vulnerability
Threat entity extracted from intelligence sources
Nov 4: 0 mentions
Nov 5: 1 mention
Nov 6: 0 mentions
Nov 7: 0 mentions
Nov 8: 0 mentions
Nov 9: 0 mentions
Nov 10: 0 mentions
Nov 4
Nov 7
Nov 10
Entities
›
vulnerability
›
PleaseFix
Frequency
6
occurrences
First Seen
March 3, 2026
Last Seen
November 5, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Associated Malware
Comet
Tools Used
1Password
Anthropic Claude Desktop
Chrome
Claude
Claude Code
Codex
CrewAI
Gemini CLI
MITRE Techniques
T1041 - Exfiltration Over C2 Channel
T1059 - Command and Scripting Interpreter
T1003 - OS Credential Dumping
T1203 - Exploitation for Client Execution
T1505.003 - Web Shell
T1566 - Phishing
Affected Platforms
Perplexity Comet
AWS Bedrock AgentCore
ChatGPT
ChatGPT Desktop
Claude Desktop
Electron
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
1
IA
Initial Access
T1566 - Phishing
2
EX
Execution
T1059 - Command and Scripting Interpreter
T1203 - Exploitation for Client Execution
1
PE
Persistence
T1505.003 - Web Shell
-
PE
Priv Esc
No techniques detected
-
DE
Defense Evasion
No techniques detected
1
CA
Cred Access
T1003 - OS Credential Dumping
-
DI
Discovery
No techniques detected
-
LM
Lateral Mov
No techniques detected
-
CO
Collection
No techniques detected
-
C2
C2
No techniques detected
1
EX
Exfil
T1041 - Exfiltration Over C2 Channel
-
IM
Impact
No techniques detected
6
techniques detected across
5
tactics
Related Clusters (2)
New 'PleaseFix' Vulnerabilities Threaten Agentic Browsers with Widespread Attacks
Jul 29
·
7 sources
68
Zenity Labs Reveals PleaseFix Vulnerabilities in Perplexity Comet and Other Browsers
Mar 3
·
18 sources
40
Related Articles (6)
Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats Without User Interaction
Thehackernews
·
4d ago
New 'PleaseFix' vulnerabilities expose agentic browsers to widespread attacks
Feeds.Feedburner
·
Jul 29
Zenity Labs Discloses Pleasefix Perplexedagent Vulnerability
zenity.io
·
Jul 28
Agentic Browsers Rewind Web Security by 20 years
Darkreading
·
Jul 27
Attackers can steal data using simple AI browser vulnerability
Computing
·
Mar 4
Zenity Labs Discloses PleaseFix Vulnerability Family in Perplexity Comet and Other Agentic ...
Morningstar
·
Mar 3
Prev
1 / 2
Next
Related Entities
Data Breach
Data Exfiltration
Malware
Phishing
Zero-day Exploit
Perplexity
Zenity Labs
OpenAI
Twitter
Amazon
LangChain
CWE-200 - Exposure of Sensitive Information