<h2>Chrome 146 ties session cookies to your hardware</h2>
<p>Google has shipped Device Bond Session credentials (actually called Device bound Session credentials, or DBSc) in Chrome 146 for Windows, with macOS support coming later. The idea is straightforward: instead of relying on a session cookie alone to prove who you are, the browser generates a public/private key pair tied to your device’s TPM (on Windows) or secure enclave (on macOS). The private key never leaves the machine.</p>
<p>What this means in practice: if malware steals your session cookies, those cookies are useless almost immediately. Any attempt to use them from another device fails because the attacker can’t produce proof of the private key. New short-lived cookies require that proof, so the window for exploitation collapses.</p>
<p>The protocol is also privacy-preserving by design. Each session gets a distinct key, so there’s no way to use it for cross-site tracking. Google developed it as an open W3C standard with input from Microsoft, okta, and others. okta ran early tests and reported a meaningful drop in session theft.</p>
<p>For web developers, adopting DBSc means adding registration and refresh endpoints to your backend. Full specs are on W3C and GitHub. Future work includes federated identity support and software-based keys for devices without secure hardware.</p>
<h2>Claude found 271 Firefox vulnerabilities in one pass</h2>
<p>Mozilla released Firefox 150 with fixes for 271 security vulnerabilities, all discovered by anthropic’s unreleased Claude model (internally called Project glasswing) in a single evaluation run. That’s not a typo. One model, one pass, 271 bugs.</p>
<p>The model is restricted to 12 named launch partners including AWS, Apple, Google, and Microsoft. It won’t be publicly released. anthropic says the vulnerability-finding capabilities emerged unintentionally, which is its own kind of unsettling detail.</p>
<p>Firefox CTO Bobby holley described the experience as giving the team “vertigo.” His argument is that this actually shifts the economics in favor of defenders: if AI can find every bug in well-structured software before attackers do, the finite number of defects becomes a solvable problem rather than an endless game of whack-a-mole.</p>
<p>The UK AI Security Institute confirmed the same model can execute autonomous multi-stage network attacks, which is the other side of that coin. A model that finds 271 vulnerabilities in Firefox can presumably also exploit them. anthropic’s previous Claude versions could achieve full control flow hijack on patched targets at a dramatically higher rate than earlier models.</p>
<p>The dual-use tension here is real and not easily resolved. The optimistic read is that defenders get to these bugs first. The pessimistic read is that the same capability, in different hands, looks very different.</p>
<h2>Other security notes</h2>
<p>A few other stories worth flagging from the same news cycle:</p>
<ul>
<li>An Adobe Reader zero-day has been actively exploited since at least December 2025.</li>
<li>The FBI retrieved deleted Signal messages from an iOS device via notification metadata, which is a reminder that “deleted” is complicated.</li>
<li>GitHub copilot briefly inserted ads into pull request summaries before rolling it back.</li>
<li>France is planning a government-wide migration from Windows to Linux, and both France and Greece are moving toward social media age restrictions. California passed an OS-level age verification law, and Apple added age checks in iOS for UK users.</li>
</ul>


Collections

Chrome 146 ships Device-bound Session credentials (DBSc) on Windows, tying session cookies to a device's TPM or secure enclave so stolen cookies become useless without the private key. The open W3C standard, developed with Microsoft and others, requires backend registration and refresh endpoints for web developers. Meanwhile, Mozilla released Firefox 150 patching 271 vulnerabilities all found in a single pass by an unreleased Claude model (Project glasswing), restricted to 12 launch partners. The dual-use tension is stark: the same AI capability that helps defenders find every bug before attackers can also execute autonomous multi-stage attacks. Other notes include an Adobe Reader zero-day, FBI recovery of deleted Signal messages via notification metadata, GitHub copilot briefly inserting ads into PR summaries, and France planning a government-wide Linux migration.

Chrome 146 ships Device Bound Session Credentials to stop session cookie theft