New research: CSS: the bomb inside your inbox 馃挘
Debuting at Black Hat USA today, @garethheyes shows how "safe" CSS in Gmail, Outlook, Fastmail, ProtonMail, Yahoo & AOL Mail becomes a serious attack surface - no JavaScript required.
#BHUSA #BlackHatUSA
We are a leading provider of software and learning on web security. We make @Burp_Suite and @WebSecAcademy.
- We're ready for you BHUSA Day 2 馃帺 What a day one - incredible to meet so many of you, and even better to hear how many are already using Burp AT. Huge congrats to our own @PortSwiggerRes @albinowax and @t0xodile, who took the stage to present brand new research.
- 馃毃 New from @PortSwiggerRes's James Kettle @albinowax At #BlackHatUSA today: can AI invent genuinely new attack techniques, not just find known bugs? Yes - and it compromised banks, government infrastructure, and an airport along the way.
- Day one of #BHUSA is here - come find us at booth #5342! Live demos, talks, and a lot of swag all day...
- Good morning Vegas 馃槑 It's day two at @BSidesLV and we're raring to go! Yesterday was a great one - thanks to everyone who stopped by the PortSwigger stand, chatted with the team, and got hands-on with Burp AT's new agentic functionality.

