Apple, Facebook & Hundreds More Hacked By 0-Day Java Exploit

DumpBrowserSecrets is a public post‑exploitation tool that harvests browser-stored credentials and session tokens from major Windows browsers (Chrome/Edge/Brave via an App‑Bound Encryption bypass, Opera/Vivaldi via DPAPI, and Firefox via NSS decryption). It uses headless Chromium + DLL injection and multiple operational evasion techniques to decrypt and export cookies, saved logins, OAuth refresh tokens, autofill data, credit cards, and history as JSON, enabling fast lateral movement or cloud account takeover from a compromised developer workstation.