Google Just Fixed Session Cookie Theft in Chrome. Here Is What It Still Cannot Stop.

Google’s Device Bound Session Credentials are a meaningful step forward against infostealer malware. They also have significant limits that security teams need to understand before assuming the problem is solved. On April 10, 2026, Google made Device Bound Session Credentials (DBSC) generally available to Windows users in Chrome 146. The announcement addresses one of the […]