AppSec Science - BlogRead my latest blog postshttps://appsec.science/The Infostealer Era and Why Device Bound Sessions Change the Mathhttps://appsec.science/blog/infostealers-and-dbsc/https://appsec.science/blog/infostealers-and-dbsc/Infostealers have turned stolen session cookies into a commodity that walks straight past MFA. Device Bound Session Credentials break that economy, and our open DBSC implementation helps services adopt it today.Tue, 09 Jun 2026 00:00:00 GMTinfostealerssession-securitydbscauthenticationplatform-security