Apple Will Not Patch Windows QuickTime Vulnerabilities

DumpBrowserSecrets is a post‑exploitation credential‑harvesting tool (published by Maldev Academy) that extracts passwords, cookies, OAuth tokens, credit card data, autofill entries, history, and bookmarks from major Chromium‑based and Firefox browsers. It uses a two‑component model (a compiled executable and a DLL injected into a headless Chromium process via Early Bird APC) to bypass Chrome's App‑Bound Encryption by invoking the IElevator COM interface, and applies DPAPI or NSS decryption for other browsers; the report details supported browsers, evasion techniques, an exemplar attack scenario, and detection and mitigation recommendations.