Firefox Patches 8 Security Vulnerabilities with 2.0.0.1

DumpBrowserSecrets is a publicly available post‑exploitation credential‑harvesting tool that extracts saved passwords, session cookies, OAuth refresh tokens, credit card data, autofill entries and browsing history from major Chromium‑based and Firefox browsers on Windows. It bypasses Chrome's App‑Bound Encryption by spawning a headless Chromium process and injecting a DLL via Early Bird APC to use the IElevator COM interface, handles DPAPI for some browsers and NSS for Firefox, and includes evasion features (string obfuscation, API hashing, PPID/argument spoofing, file‑handle duplication). The tool outputs structured JSON, is intended for red‑team assumed‑breach testing, and presents significant risk if used by attackers because it enables rapid cloud/SaaS session takeover and lateral movement from compromised developer endpoints.