Google has rolled out several Workspace security improvements that are now switched on by default. Most require no action from administrators, but business owners should be aware of what has changed.
- Session-hijacking protection: Device Bound Session Credentials (DBSC) is now generally available and enabled by default in Chrome on Windows. This ties a login session to the specific device, making stolen session cookies far harder for criminals to reuse.
- AI access controls: A new AI Control Centre in the Admin console lets administrators manage how AI tools and agents access company data in Workspace.
- Better audit visibility: Workspace audit logs now capture more detail, giving administrators deeper insight when investigating suspicious activity.
- Who is affected: All Google Workspace business customers, particularly those using Chrome on Windows.
These changes strengthen account security without disrupting users. We recommend reviewing the new AI Control Centre settings to ensure AI access aligns with your business policies. OzComm can assist Workspace clients with this review.
Source: Google Workspace Updates.