Google Chrome Beta Tests New DBSC Protection Against Cookie-Stealing Attacks

Google is piloting Device Bound Session Credentials (DBSC) in Chrome to mitigate session cookie theft and session hijacking by binding authentication sessions to device-held cryptographic keys stored (when available) in TPMs; the report references updated off-the-shelf information stealers and past phishing/cookie-stealing campaigns and notes vendor engagement and planned origin trials.