conv.

All stories
Narrative thread

Gareth Heyes exposes CSS vulnerabilities in major webmail clients

2 stories · since Aug 8

Combined activity · last 2 days peak 2/hr

Peak 2 items in one hour at Aug 9, 6 AM; 7 items over 2 days Aug 8, 4 AM — 4 itemsAug 8, 5 AM — no itemsAug 8, 6 AM — no itemsAug 8, 7 AM — no itemsAug 8, 8 AM — no itemsAug 8, 9 AM — no itemsAug 8, 10 AM — no itemsAug 8, 11 AM — no itemsAug 8, 12 PM — no itemsAug 8, 1 PM — no itemsAug 8, 2 PM — no itemsAug 8, 3 PM — no itemsAug 8, 4 PM — no itemsAug 8, 5 PM — no itemsAug 8, 6 PM — no itemsAug 8, 7 PM — no itemsAug 8, 8 PM — no itemsAug 8, 9 PM — no itemsAug 8, 10 PM — no itemsAug 8, 11 PM — no itemsAug 9, 12 AM — no itemsAug 9, 1 AM — no itemsAug 9, 2 AM — no itemsAug 9, 3 AM — no itemsAug 9, 4 AM — no itemsAug 9, 5 AM — no itemsAug 9, 6 AM — 2 itemsAug 9, 7 AM — no itemsAug 9, 8 AM — no itemsAug 9, 9 AM — no itemsAug 9, 10 AM — no itemsAug 9, 11 AM — no itemsAug 9, 12 PM — no itemsAug 9, 1 PM — no itemsAug 9, 2 PM — no itemsAug 9, 3 PM — no itemsAug 9, 4 PM — no itemsAug 9, 5 PM — no itemsAug 9, 6 PM — no itemsAug 9, 7 PM — 1 itemAug 9, 8 PM — no itemsAug 9, 9 PM — no itemsAug 9, 10 PM — no itemsAug 9, 11 PM — no itemsAug 10, 12 AM — no itemsAug 10, 1 AM — no itemsAug 10, 2 AM — no itemsAug 10, 3 AM — no itemsAug 10, 4 AM — no itemsAug 10, 5 AM — no itemsAug 10, 6 AM — no itemsAug 10, 7 AM — no itemsAug 10, 8 AM — no itemsAug 10, 9 AM — no itemsAug 10, 10 AM — no items 2 items · 6 AM
Aug 9Aug 10

How the narrative developed 2 stories

  1. Aug 8
  2. SecurityRunning 1d

    Gareth Heyes exposes CSS vulnerabilities in major webmail clients

    Security researcher reveals techniques to break CSS sanitization in Gmail, Outlook, Fastmail, ProtonMail and other webmail services.

    Peak 2 items in one 2h at Aug 9, 6 AM; 3 items over 2 days 3 items98 engagement3 sources
  3. SecurityRunning 1d

    PortSwigger researcher reveals CSS attacks stealing passwords across major webmail services

    Techniques bypassing HTML sanitization in Outlook, Gmail, Yahoo Mail and others can capture credentials and tokens, with some fixes deployed but vulnerabilities persisting.

    Peak 3 items in one 2h at Aug 8, 4 AM; 4 items over 2 days 4 items9 engagement2 sources