Vercel rolls out Device Bound Session Credentials, AI security reviews in public beta

Attackers attempting to hijack user sessions will find their efforts thwarted by Vercel's new Device Bound Session Credentials (DBSC), a security feature now being rolled out by the widely used cloud platform for hosting and building web applications. This technology is specifically engineered to restrict the damage caused by an infostealer infection, effectively rendering stolen session cookies useless. In addition to this enhancement, Vercel has also released Vercel Security Review into a public beta phase. Modern malware designed to steal information, including strains like Lumma and RedLine, targets authentication credentials, making these new protective measures particularly relevant for developers.