TECH NEWS

Vercel Adds DBSC Protection Against Session Cookie Theft

Stealing a session cookie can let hackers bypass passwords and multifactor authentication. Vercel wants to make that shortcut much harder to exploit.

Session cookies are credentials that let a website recognize a user is still authenticated, so the user doesn’t have to log in every time they revisit the site or take an action.

While convenient, it creates a security weakness: attackers can steal valid session cookies through infostealer malware and replay them from another device to impersonate their victims.

To help end that, Vercel is rolling out Device Bound Session Credentials (DBSC), a technology that ties authenticated browser sessions to cryptographic keys stored securely on the original device.

This means that even if attackers steal a session cookie, they ordinarily can’t reuse it on another device without also possessing the corresponding private key.

The development was announced on Tuesday, Nov. 3, in...

Copyright of this story solely belongs to www.techrepublic.com. To see the full text click HERE

https://platform.theverge.com/wp-content/uploads/sites/2/chorus/uploads/chorus_asset/file/23318430/akrales_220309_4977_0038.jpg?quality=90&strip=all&crop=0%2C10.732984293194%2C100%2C78.534...

Just about anyone can rent access to White House IP addresses

Emma Roth is a news writer who covers the streaming wars, consumer tech, crypto, social media, and much more. Previously, she was a writer and editor at MUO. Someone at the White House appears to be running software that could enable outsiders to rent access on the presidential network for

https://assets.techrepublic.com/uploads/2026/11/Tethered-turquoise-balloon-above-a-server-rack-1-1024x576.png?f=jpeg

This Week in Tech: AI Expands Everywhere as Security Threats and Infrastructure Pressures Mount - TechRepublic

AI spent the week animating pictures, eyeing your inbox, and sending poetry from orbit. Back on Earth, Apple was trimming AI allowances, voters were putting limits on data centers, and attackers were finding fresh ways into phones and cloud accounts. The future keeps arriving with impressive demos and a growing

https://assets.techrepublic.com/uploads/2026/11/Moody-Pebble-Device-with-LED-Dots.png?f=jpeg

Nothing's First AI Device Is Coming in December: What We Know - TechRepublic

Nothing is preparing to launch its first AI-native device in December 2026, but the company is keeping almost everything about it under wraps. CEO Carl Pei has confirmed that the product won’t introduce a new screen and that its purpose couldn’t be served by a conventional smartphone app.

https://assets.techrepublic.com/uploads/2026/11/unnamed-9.png?f=jpeg

5 Best Canva Alternatives for Businesses in 2027

Somewhere in your company, there’s a presentation featuring three different logos, five competing fonts, and a stock photo of two executives shaking hands in front of a suspiciously perfect sunset. Someone made it in Canva. Someone else approved it. Nobody wants to claim responsibility. Canva has made graphic design

Vercel joins the fight against session-cookie theft

Read more

Just about anyone can rent access to White House IP addresses

This Week in Tech: AI Expands Everywhere as Security Threats and Infrastructure Pressures Mount - TechRepublic

Nothing's First AI Device Is Coming in December: What We Know - TechRepublic

5 Best Canva Alternatives for Businesses in 2027