Vercel rolls out new protection against stolen session cookie attacks

Vercel is rolling out Device Bound Session Credentials (DBSC) to defend against information stealer malware. The security feature is being gradually deployed on the platform to protect user sessions from cookie theft. DBSC binds session credentials to the device, making stolen cookies useless to attackers. The rollout is part of Vercel's ongoing security hardening.