Gmail

New research reveals that CSS content within an email can escape its message boundary to interfere with the webmail interface. These techniques allow attackers to capture passwords and tokens, hijack trusted UI actions, take over third-party accounts, and manipulate AI tools across major platforms like Outlook, Gmail, and Yahoo Mail.

A user purchased a lead sheet from Musicnotes.com and encountered a QR code after entering payment details via Google Chrome. Scanning the QR code led to an app download and a request for face verification from a random Gmail account, raising concerns about a potential scam.

A user received a suspicious email claiming they ordered a cookie recipe from Shopify, which included mismatched credit card numbers and a PDF link. The user did not click the link, moved the email to spam, and is questioning if it is a phishing scam, noting they recently ordered a multitool on Amazon.

The article discusses an increase in apartment rental scams, where scammers used a scrambled Gmail address and listed a property at an unusually low price compared to similar listings. The scammer provided a Florida area code phone number despite the listing being in New England and claiming to be in Utah, with the initial listing removed before contact was made.

The article explains how to use Gmail's filter settings to identify and block scammers by creating filters based on sender information and subject lines. It emphasizes that emails without subject lines are likely scams and provides steps to automatically delete or send suspicious messages to the Spam folder.

A landlord received rental applications from a couple with unusual inconsistencies, including a job listed at a local hardware store but with a Home Depot offer letter from a distant location, and both applicants' emails ending up in the spam folder with a malformed 'gmail.-com' suffix. The landlord is cautious but has not yet met the applicants, who have paid the application fee and provided employment and income documentation.

A LinkedIn user in the US received a suspicious message from a recruiter offering a job identical to their current position at their current company. The recruiter used a Gmail address, claimed to be human, and the profile later disappeared, leading the user to suspect a scam. The user also noted recent layoffs at their company and two other similarly suspicious messages around the same time.

A user's Gmail account was hijacked, leading to unauthorized access and a forced child lock that prevents password changes. The user, who uses Google Drive for data storage, is struggling to recover the account despite having 2FA enabled. The account was compromised while attempting to reconnect with a friend for Minecraft modding via Curse Forge.

Anthropic has expanded voice mode availability to its Opus and Sonnet models, previously only on Haiku. The update extends voice mode to apps like Gmail, Slack, and Canva, with users increasingly applying it to business problem-solving rather than casual queries.

The user receives spam emails with their ex-wife's name in the sender field, featuring suspicious links and subjects about old memories. The emails originate from random, non-standard email addresses, not from major services like Gmail or Yahoo. The user is concerned their ex-wife may have clicked on something due to her limited tech knowledge.

A user reported a scam involving 'Rapid Cargo Express', where they were asked to pay mandatory 'coverage fees' and later 'storage penalties' for a non-existent package. The scammer used a personal Chime account for payments and a Gmail address, with no legitimate website or email confirmation from the company.

A friend's Gmail account was hacked during an account exchange scam, resulting in the deletion of his childhood email, loss of a game account with all progress, and erasure of phone data. The scammer exploited mutual trust to steal the account and change recovery information after receiving 3k money and 3-factor authentication details.

A person claims their Gmail address was used by someone else to apply for three bank accounts within a week. They contacted bank fraud departments and checked their Google login history, finding no unauthorized access.

A user received an unexpected WhatsApp message claiming to be a Facebook code, with no recent account activity. They previously experienced similar issues with their Gmail and are concerned about potential security risks after clicking 'I didn’t request a code.'

A security flaw in the Claude for Chrome browser extension, called ClaudeBleed, allows malicious extensions to impersonate the Claude website and force the assistant to perform unauthorized actions, such as reading Gmail or manipulating documents. Anthropic addressed some issues but researchers claim the core vulnerability remains unresolved, enabling rogue extensions to exploit permissions granted to Claude.

A user reports receiving suspicious sponsorship emails from a company for two weeks, with Gmail flagging them as scams. The user is unsure if the company is legitimate due to similarities with real sponsorship emails but is hesitant to engage further due to security concerns.

A small non-profit offering industry-specific trainings has been targeted by scammers using structured emails with links. Recently, two identical emails from different Gmail accounts requested Zoom meetings to discuss training options, raising concerns about potential scams.

A user applied to a Sales Associate job on Indeed and later received a suspicious email from a Gmail address claiming to be HR, requesting background check confirmation. The job posting is now deleted, and the user is concerned about phishing risks and potential email bombing.

A user reported unauthorized activity on their Instagram and Gmail accounts after using the Renz app, which they linked to their Google account. The user claims Renz's customer support dismissed their concerns, advising them to log back into their account despite potential security risks. The user warns others about the app's safety and poor response from support.

Researchers discovered a flaw in Opera GX that allowed malicious websites to silently install browser add-ons to steal data from visited pages. A proof of concept demonstrated extracting a user's Gmail address from a single visit without user interaction. Opera has patched the vulnerability and found no evidence of exploitation.

ToddyCat, a threat actor, has been linked to Umbrij malware that exploits OAuth to access Gmail via Google API, targeting corporate email compromises. Kaspersky reported that attackers focused on breaching Gmail communications through API access.

A user received a suspicious call from a random number claiming to be Amazon, leading them to cancel their order and block the number. Later, a legitimate email from Amazon Account Protection Services confirmed the call, but the user remained cautious, deleted their Amazon account, and reported the incident.

A user in Barcelona had three men take photos of them using a professional camera and an iPhone, but later found no photos on their phone. The men also AirDropped photos immediately, but the user suspects a scam due to missing photos and potential Gmail access.

Scammers use fake domain renewal emails and a deceptive website named Renovarix to trick website owners into providing personal and payment information. The scam exploits fear of domain expiration by displaying fabricated registry data and urgent countdowns, with phishing emails often sent from unverified Gmail addresses despite claiming professional branding.

A user received an email claiming their Google email address was causing confusion due to periods in the username, with the sender sharing the same first name but a different last name. The user is unsure if the email is a scam or a legitimate issue and seeks confirmation from others who may have experienced similar problems.

A user received a call from 'Google support' claiming unauthorized Gmail access from Germany. The caller requested verification via phone notification, but the user found no unauthorized activity in their security logs and noted the email provided by the scammer was nonsensical. The scammer eventually hung up, leaving the user uncertain but suspicious of a scam.

A user reported a scam involving a fake job offer for an associate software engineer position with a stipend of 36k, requiring 2 years of commitment in Bengaluru. The scam requested personal details like Gmail, OTP, and phone number before demanding a 200-rupee payment, warning others to avoid sharing sensitive information.

A user receives frequent phishing emails claiming their Cloud+ subscription payment failed, risking data deletion. They report marking emails as spam and blocking senders, but the messages persist with varying sender addresses.

The user received 10 similar German-language emails from Gmail addresses with mismatched display names and number strings, all seeking to purchase water sports equipment they are not selling. They replied to half the messages in German but received no responses, raising concerns about a potential scam.

Google AI subscribers can now use the Ask Gemini feature in Drive to search through their Gmail, reducing the need to manually sift through emails. This tool is designed to streamline the process of finding information in email archives.

A user claims Gmail incorrectly labeled their emails as spam, leading them to abandon the service. The article, hosted on ModdedBear.com, links to a Hacker News discussion with 139 points and 60 comments.

A fake email claiming to be from the IMF offers a $4.5 million grant but uses a Gmail address and urgent, generic language to trick recipients into sharing personal information for identity theft. The scam leverages real names like IMF Managing Director Kristalina Georgieva and mentions debts to create a false sense of legitimacy.

Proton Mail aims to help users transition from Gmail and Google by offering a service that provides greater privacy for managing Gmail messages.

Security researchers at Token Security discovered a chain of five vulnerabilities in Zapier that could have allowed attackers to gain access to millions of user accounts and connected systems without malware or insider access. The flaws, which exploited weaknesses in code execution and credential storage, could have enabled malicious actors to impersonate users and manipulate integrations with third-party services. The vulnerabilities were responsibly disclosed through Zapier's bug-bounty program and have since been patched.

Google has announced new features at its annual I/O developers conference, including voice interaction capabilities for Gmail and AI-powered smart glasses. The updates focus on using Gemini AI to automate and simplify everyday tasks for users.

Gmail users are being warned about sinister invites that can drain their bank accounts. The invites appear to be legitimate but are actually phishing scams. Users are advised to be cautious when clicking on links or providing personal information.

Gmail users are being warned about a phishing scam that steals bank details through 'friend' invites. The scam tricks users into clicking on malicious links, compromising their sensitive information. Users are advised to be cautious and not click on suspicious links.

Google I/O 2026 keynote presentation featured discussions on AI agents, a new service called Spark, and upgrades to its Antigravity platform. The Vergecast went live after the show to discuss highlights with Senior AI Reporter Hayden Field. Google's new AI services aim to make AI more useful.

Google announced new AI-powered tools at I/O 2026, including Gemini Spark and Daily Brief, which aim to make users' lives easier. These features rely on personal data to function effectively. Google is expanding access to Gmail's AI inbox, generating custom to-do lists and drafting personalized replies.

Google's Universal Cart will simplify shopping experiences within YouTube and Gmail. The feature aims to enhance user convenience. This innovation is part of Google's efforts to integrate services.