Google Chrome adds app-bound encryption to block infostealer malware

Google Chrome 127 introduces App-Bound Encryption on Windows: a new SYSTEM-run service that binds encrypted cookies, passwords, and authentication tokens to Chrome's app identity so only the intended app can decrypt them. The feature is intended to make credential- and cookie-stealing by infostealer malware harder and noisier for defenders, and will be expanded to protect passwords, payment data, and persistent tokens alongside other Chrome protections like Safe Browsing and Device Bound Session Credentials.