New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens

New research reveals that CSS content within an email can escape its message boundary to interfere with the webmail interface. These techniques allow attackers to capture passwords and tokens, hijack trusted UI actions, take over third-party accounts, and manipulate AI tools across major platforms like Outlook, Gmail, and Yahoo Mail.