Google Patches 32 Chrome Browser Bugs & Releases Version 14

DumpBrowserSecrets is a publicly documented post-exploitation tool that harvests browser-stored credentials and tokens across Chromium-based browsers (including Chrome, Edge, Brave) and Firefox by bypassing App-Bound Encryption using a headless Chromium process and IElevator COM interface with Early Bird APC DLL injection, extracting DPAPI keys for some browsers and using NSS decryption for Firefox; it outputs structured JSON of cookies, saved logins, OAuth refresh tokens, credit card data, autofill entries and history. The report describes technical implementation, evasion features (string obfuscation, API hashing, PPID/argument spoofing, handle duplication, custom SQLite parser), an attack scenario demonstrating rapid credential exfiltration, and recommended detection/mitigation approaches focused on monitoring IElevator calls, headless instantiation, and non-browser access to browser SQLite databases.