New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
New research shows content inside an email can escape its message boundary and interfere with the webmail interface.
Across attack chains spanning Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail, the techniques can capture passwords, take over third-party accounts, leak tokens, hijack trusted UI actions, and manipulate AI tools that read email.
PortSwigger researcher Gareth
Source: The Hacker News
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 486 requests (recent log) 216.244.66.232 — 115 requests (recent log) 216.73.216.125 — 103 requests (recent
Large language models develop novel social biases through adaptive exploration Source: Hacker News
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon