Latest Update Patches 78 CVE-classified Flash Security Vulnerabilities

DumpBrowserSecrets is a publicly distributed post‑exploitation tool that harvests browser-stored secrets (saved logins, session cookies, OAuth refresh tokens, credit cards, autofill and history) from major Chromium- and Gecko-based browsers by using DLL injection into a headless Chromium process to bypass App‑Bound Encryption (IElevator COM interface), retrieving DPAPI keys for some browsers and handling Firefox via NSS decryption; the report details its implementation, evasion features, usage examples, detection opportunities, and mitigation recommendations.