Session cookie theft: how Chrome's DBSC protects you — and where extensions still get in
Session cookie theft lets attackers skip your login and 2FA. Chrome 146's DBSC binds sessions to your device — but here's the gap extensions still exploit.
Maxim Kosterin
10 min read