PayPal Patches Critical Security Vulnerabilities

DumpBrowserSecrets is a publicly available post-exploitation credential-harvesting tool that extracts browser-stored secrets (cookies, saved logins, OAuth refresh tokens, credit cards, autofill data, history, bookmarks) from Chromium-based browsers (Chrome, Edge, Brave) by bypassing App-Bound Encryption via a headless Chromium process and IElevator COM interface, from DPAPI-based browsers (Opera, Opera GX, Vivaldi), and from Firefox (NSS). The report details functionality, operational evasion (string obfuscation, API hashing, PPID/argument spoofing, Early Bird APC DLL injection), usage examples, detection opportunities, and mitigations for enterprise environments.