threat-intel New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens Researchers at PortSwigger have discovered several new attack vectors targeting webmail interfaces, allowing attackers to steal passwords, take over accounts, and manipulate AI tools. The vulnerabilities exploit weaknesses in how webmail clients process HTML and CSS, enabling attackers to bypass security measures and i… The Hacker News · Aug 8, 2026 High webmailcsshtml
threat-intel CSS: The Hidden Threat Lurking in Your Inbox Researchers have discovered that Cascading Style Sheets (CSS), traditionally used for website design, can be weaponized to steal sensitive data from webmail platforms. While not a new threat, the potential for CSS-based… Dark Reading · Aug 5, 2026 Medium csswebmailsecurity
threat-intel Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages A vulnerability in Opera GX allowed malicious websites to silently install browser add-ons that could steal data from visited pages. Researchers demonstrated how a malicious iframe could install a mod, which then injecte… The Hacker News · Jul 6, 2026 High browsercssdata-theft
