CSS attacks still break webmail defenses and steal passwords, tokens

CSS attacks against Outlook, Gmail, Fastmail, Yahoo Mail, AOL Mail, and other webmail services can cross the boundary between an email and the trusted inbox interface. Public proof-of-concept attacks demonstrated password capture, session-token theft, UI hijacking, and manipulation of AI tools connected to email.
Source

👉@sysadminoff

https://4sysops.com/archives/css-attacks-still-break-webmail-defenses-and-steal-passwords-tokens/