Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows

📅 10 April 2026 at 07:58 UTC📰 The Hacker NewsView original source ↗

Google has made Device Bound Session Credentials (DBSC) generally available to all Windows users of its Chrome web browser, months after it began testing the security feature in open beta. The public availability is currently limited to Windows users on Chrome 146, with macOS expansion planned in an upcoming Chrome release. "This project represents a significant

🤖 AI BriefingAuto-generated threat analysis

🔍Threat Overview

Google has rolled out Device Bound Session Credentials (DBSC) in Chrome 146 to prevent session theft on Windows, marking a significant improvement in browser security. This feature is currently limited to Windows users and will expand to macOS in an upcoming release.

⚙️Technical Details

Affected Systems

Windows

Attack Vectors

Session theft via web browsers

💥Impact Assessment

Severity: H

🛡️Recommended Actions

1Update to the latest version of Google Chrome (146 or later)

2Enable DBSC in browser settings

3Regularly review and update browser extensions for security vulnerabilities

📦Affected Products

[object Object]

Read the full article

This is a curated summary. The complete article is available at The Hacker News.

Read on The Hacker News ↗

← Back to feed