Google Chrome Update Disrupts Infostealer Cookie Theft

Google has released Device Bound Session Credentials (DBSC) in Chrome for Windows to prevent account hijacking via session-cookie theft by infostealer malware. DBSC ties login sessions to device-resident keys stored in TPM/Secure Enclave so stolen cookies cannot be reused, and Google reports reduced successful attacks during origin trials; the report also highlights the large scale and impact of infostealers that have previously affected millions of devices and high-profile organisations.