CSS Attacks Bypass Webmail Security to Steal Passwords and Tokens
Researchers have demonstrated new CSS-based attack techniques that can evade webmail defenses, allowing attackers to exfiltrate passwords and authentication tokens. The attacks exploit how stylesheets interact with page rendering and user interaction. This is critical because webmail is a high-value target, and the technique may affect other web applications as well.