Yesterday, in ablog poston Google’s security blog, Willian Harris from Chrome’s Security Teamsaid that Google is improving the security ofChrome cookieson Windows PCs by adopting asimilar method used in macOSto help protect users from info-stealingmalware.
The security update addresses session cookies that authenticate your identity when you switch apps without logging back in. Google wants to adopt the security system used by Keychain on macOS and start using “a new protection on Windows,” which updates Data Protection API (DPAPI) and brings a new security tool called “application-bound” encryption.
With this new wall of security in Chrome, Google asserts that it’ll encrypt information related to app identity.
The new protection will be available in Chrome 127, but Google has plans to expand the App-Bound Encryption to payment data, passwords, and other persistent authentication tokens. Google explained how it works by saying that “App-Bound Encryption relies on a privileged service to verify the identity of the requesting application. During encryption, the App-Bound Encryption service encodes the app’s identity into the encrypted data and then verifies this is valid when decryption is attempted. If another app on the system tries to decrypt the same data, it will fail.”
Google’s new security approach will make it easier forantivirus programs such asBitdefender and Malwarebytesto detect.
This news once again creates a curious wrinkle in the story, with Macs and Linux systemsbeing the only ones not affected by the IT outagecaused by a faulty update from CrowdStrike that affected industries such as retail, banks, and especially airlines, as George Kurtz,CrowdStrikeVP, mentioned in apost on X(formerly Twitter).
Microsoft is evenconsidering making an important Mac-like changeto the way Windows security works following the incident.
Chrome users can stay safe byupdating their browsersas soon as possible since the Chrome 127 update is now available. This again reminds us of the importance of always keeping our apps and browsers running on the latest version.
