Vercel, the popular cloud platform for building and hosting websites and web applications, has announced the rollout of Device Bound Session Credentials (DBSC) and the launch of Vercel Security Review in public beta. Making stolen session cookies worthless Device Bound Session Credentials is a security technology designed to limit the consequences of an infostealer infection and to thwart attackers’ session hijacking attempts. Aside from stealing authentication credentials, modern info-stealing malware such as Lumma, RedLine, and … More
The post Vercel ties login sessions to devices, rolls out AI security reviews in public beta appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
PortSwigger’s Burp AT lets enterprises delegate pentests with defined limits
Sysdig AI Defense puts runtime guardrails on AI agents
Google puts new limits on AI agents that hunt threats and fix vulnerabilities