css attacks news
2 stories
Webmail CSS Attacks Expose a New Risk for AI-Powered Email Tools
A security researcher has demonstrated a series of webmail client vulnerabilities that leverage Cascading Style Sheets (CSS) to steal credentials, hijack sessions, and manipulate AI tools integrated with user inboxes. The research, conducted by Gareth Heyes of PortSwigger, details attack chains against major webmail services including Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL…
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
New research has uncovered a sophisticated class of CSS-based attacks capable of circumventing webmail security mechanisms, allowing adversaries to exfiltrate sensitive data such as user passwords and session tokens. The reported techniques demonstrate a method for bypassing existing defenses in widely used email services, including those offered by Microsoft Outlook, Google Gmail, and Yahoo…