conv.

All stories
Narrative thread

CSS-Based Web Security Vulnerabilities

Security researchers discover and expose critical CSS injection attacks that enable password theft from major webmail platforms.

2 stories · since Aug 8

Combined activity · last 43 hours peak 2/hr

Peak 2 items in one hour at Aug 9, 5 AM; 7 items over 43 hours Aug 8, 3 AM — 4 itemsAug 8, 4 AM — no itemsAug 8, 5 AM — no itemsAug 8, 6 AM — no itemsAug 8, 7 AM — no itemsAug 8, 8 AM — no itemsAug 8, 9 AM — no itemsAug 8, 10 AM — no itemsAug 8, 11 AM — no itemsAug 8, 12 PM — no itemsAug 8, 1 PM — no itemsAug 8, 2 PM — no itemsAug 8, 3 PM — no itemsAug 8, 4 PM — no itemsAug 8, 5 PM — no itemsAug 8, 6 PM — no itemsAug 8, 7 PM — no itemsAug 8, 8 PM — no itemsAug 8, 9 PM — no itemsAug 8, 10 PM — no itemsAug 8, 11 PM — no itemsAug 9, 12 AM — no itemsAug 9, 1 AM — no itemsAug 9, 2 AM — no itemsAug 9, 3 AM — no itemsAug 9, 4 AM — no itemsAug 9, 5 AM — 2 itemsAug 9, 6 AM — no itemsAug 9, 7 AM — no itemsAug 9, 8 AM — no itemsAug 9, 9 AM — no itemsAug 9, 10 AM — no itemsAug 9, 11 AM — no itemsAug 9, 12 PM — no itemsAug 9, 1 PM — no itemsAug 9, 2 PM — no itemsAug 9, 3 PM — no itemsAug 9, 4 PM — no itemsAug 9, 5 PM — no itemsAug 9, 6 PM — no itemsAug 9, 7 PM — 1 itemAug 9, 8 PM — no itemsAug 9, 9 PM — no items 2 items · 5 AM
Aug 9

How the narrative developed 2 stories

  1. Aug 8
  2. SecurityRunning 1d

    Gareth Heyes exposes CSS vulnerabilities in major webmail clients

    Security researcher reveals techniques to break CSS sanitization in Gmail, Outlook, Fastmail, ProtonMail and other webmail services.

    Peak 2 items in one hour at Aug 9, 5 AM; 3 items over 43 hours 3 items89 engagement3 sources
  3. SecurityRunning 1d

    PortSwigger researcher reveals CSS attacks stealing passwords across major webmail services

    Techniques bypassing HTML sanitization in Outlook, Gmail, Yahoo Mail and others can capture credentials and tokens, with some fixes deployed but vulnerabilities persisting.

    Peak 3 items in one hour at Aug 8, 3 AM; 4 items over 43 hours 4 items9 engagement2 sources