CSS was once just about design. Now researchers warn it's powerful enough to exfiltrate data from webmail — and some vendors aren't prepared.

CSS was once just about design. Now researchers warn it's powerful enough to exfiltrate data from webmail — and some vendors aren't prepared.

Outlook CSS techniques can spoof Microsoft sign-in and capture passwords, while Gmail image-set() can trigger external requests from malicious email c