Security News New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens TheHackerNews Daniel Bender 08 Aug 2026 Share Outlook CSS techniques can spoof Microsoft sign-in and capture passwords, while Gmail image-set() can trigger external requests from malicious email c