News

High-severity WinRAR 0-day exploited for weeks by 2 groups

A high-severity zero-day in the widely used WinRAR file compressor is under active exploitation by two Russian cybercrime ...
WeLiveSecurity5d

Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability

ESET Research discover a zero-day vulnerability in WinRAR being exploited in the wild in the guise of job application ...
PCMag on MSN4d

Russian 'RomCom' Hackers Exploit WinRAR Flaw Via Phishing Emails

ESET warns that at least two Russian hacking groups are using the zero-day flaw in WinRAR for cyberespionage purposes.

Details emerge on WinRAR zero-day attacks that infected PCs with malware

Researchers have released a report detailing how a recent WinRAR path traversal vulnerability tracked as CVE-2025-8088 was ...

WinRAR Zero-Day Exploited by Russian-Linked Hackers RomCom and Paper Werewolf

Older WinRAR versions let malicious archives override the user-specified path via crafted archives, enabling stealthy system ...

ESET Research: Russian RomCom group exploits new vulnerability, targets companies in Europe and Canada

If you use WinRAR or other affected components such as the Windows versions of its command line utilities, UnRAR.dll, or the ...
latesthackingnews.com3d

WinRAR Fixed A Zero-Day Flaw Exploited By RomCom

The popular file archiving tool WinRAR had a serious zero-day vulnerability threatening systems with code execution attacks.

WinRAR, Which You Totally Paid For, Was Under Siege By Zero-Day Attacks

The WinRAR archiving utility has been the target of a couple of large-scale attacks that leverage a 0-day vulnerability. The ...
WeLiveSecurity5d

WinRAR zero-day exploited in espionage attacks against high-value targets

The attacks used spearphishing campaigns to target financial, manufacturing, defense, and logistics companies in Europe and Canada.
The Hacker News5d

WinRAR Zero-Day Under Active Exploitation – Update to Latest Version Immediately

The maintainers of the WinRAR file archiving utility have released an update to address an actively exploited zero-day vulnerability.

WinRAR has a serious security flaw - worrying zero-day issue lets hackers plant malware, so patch right away

Iconic archiving platform WinRAR carried a dangerous zero-day vulnerability which could have let hackers plant malware on ...

Russia's RomCom among those exploiting a WinRAR 0-day in highly-targeted attacks

Plus, RomCom isn't the only Russia-linked crew to abuse WinRAR holes. Fancy Bear, the GRU cyber-espionage crew, previously exploited CVE-2023-38831 for large-scale phishing campaigns against ...