Vercel
CompanyRecent news
Vercel binds login sessions to devices and launches AI security reviews in public beta
Vercel has rolled out Device Bound Session Credentials (DBSC), which tie login sessions to the device that created them to limit the damage from infostealer infections and session hijacking. The company has also launched Vercel Security Review in public beta. The article notes that infostealers such as Lumma and RedLine steal authentication credentials, so stolen session cookies should be less useful to attackers.
Vercel rolls out Device Bound Session Credentials to counter stolen session cookies
Vercel is gradually rolling out Device Bound Session Credentials (DBSC) across its platform. The feature is intended as a key defence against information stealer malware that takes session cookies to hijack authenticated sessions.