CYBERSECURITYTRACKER
Permanent story citation

Vercel rolls out new protection against stolen session cookie attacks

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 12396

As cited

Copy frozen at (site build).

cloud saas

Vercel rolls out new protection against stolen session cookie attacks

Vercel is rolling out Device Bound Session Credentials (DBSC) to defend against information stealer malware that targets stolen session cookies. The feature binds session credentials to specific devices, preventing attackers from using cookies captured on other systems.

Why it matters: Developers using Vercel for application deployment and hosting need to understand this protection mechanism as part of their account security posture against credential theft attacks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

cloud saas

Vercel rolls out new protection against stolen session cookie attacks

Vercel is rolling out Device Bound Session Credentials (DBSC) to defend against information stealer malware that targets stolen session cookies. The feature binds session credentials to specific devices, preventing attackers from using cookies captured on other systems.

Why it matters: Developers using Vercel for application deployment and hosting need to understand this protection mechanism as part of their account security posture against credential theft attacks.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary