PortSwigger

New research: CSS: the bomb inside your inbox 💣

Debuting at Black Hat USA today, @garethheyes shows how "safe" CSS in Gmail, Outlook, Fastmail, ProtonMail, Yahoo & AOL Mail becomes a serious attack surface - no JavaScript required.

#BHUSA #BlackHatUSA

We're ready for you BHUSA Day 2 🎩

What a day one - incredible to meet so many of you, and even better to hear how many are already using Burp AT.

Huge congrats to our own @PortSwiggerRes @albinowax and @t0xodile, who took the stage to present brand new research.

🚨 New from @PortSwiggerRes's James Kettle @albinowax

At #BlackHatUSA today: can AI invent genuinely new attack techniques, not just find known bugs?

Yes - and it compromised banks, government infrastructure, and an airport along the way.

Day one of #BHUSA is here - come find us at booth #5342!

Live demos, talks, and a lot of swag all day...

Good morning Vegas 😎 It's day two at @BSidesLV and we're raring to go!

Yesterday was a great one - thanks to everyone who stopped by the PortSwigger stand, chatted with the team, and got hands-on with Burp AT's new agentic functionality.