New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
New research shows content inside an email can escape its message boundary and interfere with the webmail interface.
Across attack chains spanning Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail, the techniques can capture passwords, take over third-party accounts, leak tokens, hijack trusted UI actions, and manipulate AI tools that read email.
PortSwigger researcher Gareth
Source: The Hacker News
Show HN: Ballet – Workflow automation that writes integrations against any API Source: Hacker News
Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet Cybersecurity researchers have flagged a new malware family that’s specifically designed to infect Android-based vehicle head unit firmware