Yahoo, AOL, Fastmail, Google and Microsoft: New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens

New Webmail Exploits Bypass Security Boundaries, Risking Data Theft and Account Takeovers

Research presented at Black Hat USA 2026 by PortSwigger’s Gareth Heyes reveals critical vulnerabilities in major webmail platforms including Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail that allow malicious content within emails to escape message boundaries and manipulate trusted interfaces. The findings, published on August 6, demonstrate how attackers could steal passwords, hijack third-party accounts, leak tokens, and exploit AI tools processing emails.

Key Attack Vectors

1. Outlook (Firefox Chain)

   • A proof-of-concept (PoC) spoofs a Microsoft sign-in screen, capturing passwords as users type. The attack leverages label elements, custom attributes, and media-query parsing tricks to bypass sanitization, disguising a select element as a password field. Firefox’s option-selection timer reset enables real-time credential theft.

2. Yahoo/AOL (Paste Race Condition)

   • In Firefox, pasted HTML retains active CSS briefly before sanitization, allowing attackers to extract Medium email-login tokens. The victim copies attacker-supplied CSS into a draft, triggering requests that reveal enough of the 12-character token for reconstruction and account takeover.

3. Gmail (AI-Powered Exfiltration)

   • A prompt-injection attack via Anthropic’s Claude Cowork (connected to Gmail) tricks the AI into retrieving a Slack token from a confirmation email. The token is placed in an HTML draft, and viewing it leaks the data. The exploit abuses Gmail’s image-set() fallback to bypass sanitization.

4. Fastmail (CSS Hotwiring & AI Manipulation)

   • CSS pseudo-elements and opacity tricks deceive OpenAI’s Atlas AI (deprecated as of August 9, 2026) into executing hidden instructions. When a user asks Atlas to translate visible text, the AI instead opens tabs and encodes the victim’s name in URLs.
   • "CSS hotwiring" redirects clicks to unintended UI actions, while an image-proxy bypass (via the user.fm domain) reveals email-viewing activity.

5. Proton Mail (IP Leak)

   • A separate exploit exposes the recipient’s IP address, contradicting Proton’s claim of hiding personal IPs and exact open times.

Defensive Gaps & Mitigations

While Fastmail patched two CSS mutation bugs and a Proton Mail proxy bypass was neutralized, several vulnerabilities remain unaddressed:

• Outlook’s label-jacking and Gmail’s image-set() bypass still function.
• The full Outlook password-capture chain’s fix status is unclear.

The research highlights two primary attack paths:

• Abusing allowed HTML/CSS in webmail interfaces.
• Exploiting discrepancies between sanitizer approvals and browser rendering.

Recommended Defenses

The paper advises webmail providers to:

• Isolate HTML emails in sandboxed iframes.
• Restrict CSS, custom attributes, select menus, and image requests.
• Use character allow lists for CSS validation and block dangerous selectors.
• Prevent attacker-controlled image requests via allow-listed domains.

Public PoCs for the disclosed techniques remain available as of August 8, though no active malicious exploitation has been reported. The findings underscore the need for strict boundary enforcement between untrusted email content and trusted interfaces.

Source: https://thehackernews.com/2026/08/new-css-attacks-can-break-webmail.html

AOL cybersecurity rating report: https://www.rankiteo.com/company/aol

Email Signature Management for Microsoft 365 / Outlook / Entra ID | by Xink cybersecurity rating report: https://www.rankiteo.com/company/microsoft-outlook-365

Yahoo Mail cybersecurity rating report: https://www.rankiteo.com/company/yahoo-mail

Fastmail cybersecurity rating report: https://www.rankiteo.com/company/fastmail

Google cybersecurity rating report: https://www.rankiteo.com/company/google

"id": "AOLMICYAHFASGOO1786188226",
"linkid": "aol, microsoft-outlook-365, yahoo-mail, fastmail, google",
"type": "Vulnerability",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Technology/Email',
                        'location': 'Global',
                        'name': 'Microsoft Outlook',
                        'size': 'Large',
                        'type': 'Webmail Service'},
                       {'industry': 'Technology/Email',
                        'location': 'Global',
                        'name': 'Gmail',
                        'size': 'Large',
                        'type': 'Webmail Service'},
                       {'industry': 'Technology/Email',
                        'location': 'Global',
                        'name': 'Fastmail',
                        'size': 'Medium',
                        'type': 'Webmail Service'},
                       {'industry': 'Technology/Email',
                        'location': 'Global',
                        'name': 'Proton Mail',
                        'size': 'Medium',
                        'type': 'Webmail Service'},
                       {'industry': 'Technology/Email',
                        'location': 'Global',
                        'name': 'Yahoo Mail',
                        'size': 'Large',
                        'type': 'Webmail Service'},
                       {'industry': 'Technology/Email',
                        'location': 'Global',
                        'name': 'AOL Mail',
                        'size': 'Large',
                        'type': 'Webmail Service'}],
 'attack_vector': ['Email',
                   'CSS/HTML Exploitation',
                   'Prompt Injection',
                   'Race Condition'],
 'data_breach': {'data_exfiltration': 'Yes (tokens, passwords, IP addresses)',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Passwords',
                                              'Tokens',
                                              'IP Addresses',
                                              'Personally Identifiable '
                                              'Information']},
 'date_detected': '2026-08-06',
 'date_publicly_disclosed': '2026-08-06',
 'description': 'Research presented at Black Hat USA 2026 by PortSwigger’s '
                'Gareth Heyes reveals critical vulnerabilities in major '
                'webmail platforms (Outlook, Gmail, Fastmail, Proton Mail, '
                'Yahoo Mail, and AOL Mail) that allow malicious content within '
                'emails to escape message boundaries and manipulate trusted '
                'interfaces. Attackers could steal passwords, hijack '
                'third-party accounts, leak tokens, and exploit AI tools '
                'processing emails.',
 'impact': {'brand_reputation_impact': 'High (major webmail providers '
                                       'affected)',
            'data_compromised': ['Passwords',
                                 'Tokens',
                                 'IP Addresses',
                                 'Personally Identifiable Information'],
            'identity_theft_risk': 'High',
            'operational_impact': 'Potential unauthorized access to '
                                  'third-party accounts and AI tools',
            'systems_affected': ['Outlook',
                                 'Gmail',
                                 'Fastmail',
                                 'Proton Mail',
                                 'Yahoo Mail',
                                 'AOL Mail']},
 'investigation_status': 'Ongoing (some vulnerabilities remain unaddressed)',
 'lessons_learned': 'The incident highlights the need for strict boundary '
                    'enforcement between untrusted email content and trusted '
                    'interfaces, as well as the risks of allowing unrestricted '
                    'HTML/CSS in webmail platforms.',
 'motivation': ['Data Theft', 'Account Hijacking', 'Token Leakage'],
 'post_incident_analysis': {'corrective_actions': ['Implement stricter '
                                                   'boundary enforcement',
                                                   'Patch known '
                                                   'vulnerabilities (e.g., CSS '
                                                   'mutation bugs, proxy '
                                                   'bypasses)'],
                            'root_causes': ['Abusing allowed HTML/CSS in '
                                            'webmail interfaces',
                                            'Exploiting discrepancies between '
                                            'sanitizer approvals and browser '
                                            'rendering']},
 'recommendations': ['Isolate HTML emails in sandboxed iframes',
                     'Restrict CSS, custom attributes, select menus, and image '
                     'requests',
                     'Use character allow lists for CSS validation and block '
                     'dangerous selectors',
                     'Prevent attacker-controlled image requests via '
                     'allow-listed domains'],
 'references': [{'date_accessed': '2026-08-06',
                 'source': 'Black Hat USA 2026 Presentation by Gareth Heyes '
                           '(PortSwigger)'},
                {'date_accessed': '2026-08-08',
                 'source': 'Public PoCs for disclosed techniques'}],
 'response': {'containment_measures': ['Fastmail patched two CSS mutation bugs',
                                       'Proton Mail neutralized a proxy '
                                       'bypass'],
              'remediation_measures': ['Isolate HTML emails in sandboxed '
                                       'iframes',
                                       'Restrict CSS, custom attributes, '
                                       'select menus, and image requests',
                                       'Use character allow lists for CSS '
                                       'validation',
                                       'Block dangerous selectors',
                                       'Prevent attacker-controlled image '
                                       'requests via allow-listed domains']},
 'title': 'New Webmail Exploits Bypass Security Boundaries, Risking Data Theft '
          'and Account Takeovers',
 'type': ['Data Breach',
          'Account Takeover',
          'Credential Theft',
          'AI Exploitation'],
 'vulnerability_exploited': ['Label elements and custom attributes in Outlook',
                             'Paste race condition in Yahoo/AOL',
                             'Image-set() fallback in Gmail',
                             'CSS pseudo-elements and opacity tricks in '
                             'Fastmail',
                             'Image-proxy bypass in Proton Mail']}