account takeover

Google Chrome adds device-bound session credentials to block cookie theft

Google Chrome has introduced device-bound session credentials (DBSCs) to prevent session cookie theft. The feature stores unique encryption keys in hardware security modules like TPMs or secure enclaves, neutralizing infostealer malware and adversary-in-the-middle attacks.