Microsoft Releases Out-Of-Band Patch For IE 0-Day Vulnerability

DumpBrowserSecrets is a Windows post‑exploitation tool that harvests browser-stored secrets (passwords, session cookies, OAuth tokens, credit cards, autofill, history) from Chrome, Edge, Brave, Opera variants, Vivaldi, and Firefox by bypassing App‑Bound Encryption (via IElevator COM access through DLL injection into a headless Chromium process) and using DPAPI/NSS extraction where applicable; the report documents its implementation, evasion techniques, a realistic attack scenario, and detection/mitigation guidance for defenders.