Google Chrome gets ‘Device Bound Session Credentials’ to stop cookie theft

Google announced Device Bound Session Credentials (DBSC) to protect Chrome users from cookie theft by info-stealer malware, binding authentication cookies to device-resident private keys so stolen cookies are unusable; the approach is intended to force attackers to operate locally and enhance on-device detection, aligns with Google’s move away from third-party cookies, is being developed openly toward a 2024 trial, and has interest from identity providers and other browsers.