Chrome adopts what may be the best protection yet against account takeovers
Device-bound session credentials thwart an increasingly common form of account takeover.
We haven't written up this one. Ars Technica has the full story — the link below goes straight to it.