Articles tagged "session-security"

2 articles found

An orange watercolor session token tethered by a short chain to a small device square — a credential bound to one device, unable to travel.

session-security cookie-theft infostealer

Session cookie theft: how Chrome's DBSC protects you — and where extensions still get in

Chrome 146's Device Bound Session Credentials make stolen session cookies useless on another machine. How DBSC works and the gap extensions still exploit.

Maxim Kosterin

June 29, 2026

9 min read

privacy cookies browser-extensions

The `cookies` permission explained: what browser extensions can really access in your sessions

The cookies permission lets extensions read, write, and delete cookies — including session tokens. Here's what that means for your accounts and how to check.

Maxim Kosterin

March 6, 2026

8 min read