Google Chrome Just Rolled Out a Major New Security Feature
Google Chrome has introduced a new security feature called Device Bound Session Credentials (DBSC) to enhance user protection against session cookie theft. This feature stores session cookies in secure hardware components, making it difficult for hackers to access them even if malware infects the device. DBSC is now available for most Chrome users, including those on Windows and Mac systems.
- ▪DBSC prevents session cookie theft by storing them in secure hardware components like the Trusted Platform Module or Secure Enclave.
- ▪Hackers typically target session cookies to impersonate users, but DBSC significantly raises the difficulty of accessing these cookies.
- ▪The feature has been in beta testing since April and is now available to virtually all Chrome users.
Opening excerpt (first ~120 words) tap to expand
Traditional security practices are excellent tools for protecting your digital life. If you use a unique password for each of your accounts and set up two-factor authentication (2FA) for any that support it, hackers will have a hard time getting at your data. However, even 2FA isn't foolproof: Hackers still have tools to bypass your security measures and worm their way into your online spaces, through zero fault of your own. Luckily, Google is now rolling out a new security measure that should reduce these vulnerabilities.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at Lifehacker.