Hosted on MSN

WinRAR has a serious security flaw - worrying zero-day issue lets hackers plant malware, so patch right away

ESET found a high-severity bug in WinRAR being used by RomCom, a known Russian hacking collective The bug was being used to deploy backdoors allowing full access to compromised computers WinRAR says ...
Bleeping Computer

Details emerge on WinRAR zero-day attacks that infected PCs with malware

Researchers have released a report detailing how a recent WinRAR path traversal vulnerability tracked as CVE-2025-8088 was exploited in zero-day attacks by the Russian 'RomCom' hacking group to drop ...
HotHardware

WinRAR, Which You Totally Paid For, Was Under Siege By Zero-Day Attacks

Everyone's favorite file archiving utility isn't often in the news, but today is an exception. The WinRAR archiving utility has been the target of a couple of large-scale attacks that leverage a 0-day ...
TechRepublic

WinRAR Zero-Day Exploited by Russian-Linked Hackers RomCom and Paper Werewolf

Older WinRAR versions let malicious archives override the user-specified path via crafted archives, enabling stealthy system compromise. Cybersecurity researchers have identified an actively exploited ...
Lifehacker

You Need to Update WinRAR Right Now

Pranay Parab is an independent tech journalist based in Mumbai, India. He covers tech for Lifehacker, and specializes in tutorials and in-depth features. RARLAB has fixed a critical security ...
PC World

WinRAR under attack by state-level hackers, according to Google

PCWorld reports that Google’s Threat Intelligence Group discovered state-sponsored hackers from Russia and China actively exploiting a critical WinRAR vulnerability (CVE-2025-8088). This security flaw ...
Gizmodo

You Need to Update WinRAR, Right Now

Government-backed hackers from Russia and China exploited a known vulnerability in outdated versions of WinRAR, the world’s most popular compression tool with over 500 million users. Google’s Threat ...