Microsoft Plugs 11 Serious Flaws in December Update

**DumpBrowserSecrets** is a Windows post‑exploitation credential-harvesting tool that extracts browser-stored secrets (saved passwords, cookies, OAuth refresh tokens, credit cards, autofill, history) from Chromium-based browsers and Firefox; it includes an App‑Bound Encryption bypass for Chrome 127+ by injecting a DLL into a spawned headless Chromium process to use the IElevator COM interface, and incorporates several operational evasion features to reduce EDR detection. The tool outputs structured JSON, is aimed at red team/assumed-breach testing, and the report includes detection opportunities and mitigations.