Friday, January 5, 2024

Google Session cookies a proposed mitigation?

 In the Cyber Security presentation 4-Jan-2024 the new attack targeting Google session cookie reuse was cited.

 Session cookies, if re-validated, allow attackers to logon to Google services without re supplying the password/authentication.

 Not Good!

 A just proposed mitigation: power cycle the device. A further step, sign-out of any/all browser profiles. Even more secure, reset your passphrase and sing-in again.

No comments:

Post a Comment