Proton Mail spoofing flaw still unfixed 17 months after bounty

Security researcher Alonso Vidales has disclosed a sender-spoofing issue in Proton Mail that he says can make fraudulent messages appear to come from trusted contacts without showing an authentication warning. According to the report, Proton acknowledged the finding and awarded a bounty in April 2025, but the technique remained reproducible in... Weiterlesen