Vercel rolls out new protection against stolen session cookie attacks

Vercel is gradually deploying Device Bound Session Credentials (DBSC) on its platform. The technology binds a login session to a device and is intended to prevent stolen session cookies from being reused on another device. DBSC currently works in Chrome on macOS and Windows. Vercel is also rolling out similar protection called DPoP for the Vercel CLI and has launched Security Review in public beta for Pro and Enterprise teams.