Skip to content
securitytabs

Covered by 2 outlets — first reported by BleepingComputer, Nov 4, 21:31 UTC

Vercel rolls out new protection against stolen session cookie attacks

MentionsLumma Stealer

Summary

Vercel, the cloud platform for building and hosting websites and web applications, is gradually rolling out Device Bound Session Credentials (DBSC), a technology that ties a login session to the device that opened it. The aim is to make session cookies stolen by information-stealing malware such as Lumma and RedLine useless to attackers trying to hijack accounts. Vercel also announced a public beta of Vercel Security Review.

AI summary by the SecurityTabs newsroom, checked against BleepingComputer, Help Net Security. Read the outlets below for the full story.

Continue reading

2 outlets, in the order they reported it.

  1. BleepingComputerFirst report

    Vercel rolls out new protection against stolen session cookie attacks

    Vercel is gradually rolling out Device Bound Session Credentials (DBSC) on its platform as a key defense against information stealer malware.

    Read at BleepingComputer Details

  2. Help Net Security

    Vercel ties login sessions to devices, rolls out AI security reviews in public beta

    Vercel, the popular cloud platform for building and hosting websites and web applications, has announced the rollout of Device Bound Session Credentials (DBSC) and the launch of Vercel Security Review in public beta.

    Read at Help Net Security Details

Explained

The technology and terms in this story. Learn more