New CSS Attacks Break Webmail Defenses to Steal Passwords and Tokens
New research presented at Black Hat USA 2026 reveals that CSS and HTML techniques can break out of email message boundaries to…
Tag: PortSwigger
AI-Assisted HTTP Terminator Uncovers Novel HTTP Desync Techniques and Apache Zero-Day
PortSwigger's AI-assisted research system, HTTP Terminator, has generated and proven new HTTP desynchronization techniques after exploring 30,000 candidate attack vectors. The system,…
PortSwigger Research Exposes CSS Attacks on Webmail
PortSwigger researcher Gareth Heyes presented new CSS-based attacks at Black Hat USA 2026 that can break webmail defenses to steal passwords and…