Adobe Patches Latest Flash Zero Day Vulnerability

DumpBrowserSecrets is a post-exploitation credential-harvesting tool that targets Chrome, Edge, Brave, Opera (and variants), Vivaldi, and Firefox to extract saved credentials, session cookies, OAuth refresh tokens, credit cards, autofill data and history. It bypasses App‑Bound Encryption in modern Chromium builds by spawning a headless browser and injecting a DLL to use the IElevator COM interface, includes multiple evasion techniques (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), and the report details usage, output, detection opportunities and mitigations for defenders.