The vulnerability closed in WinRAR 7.13 was attacked independently by two different groups.

The popular file archiving tool WinRAR had a serious zero-day vulnerability threatening systems with code execution attacks. While WinRAR has now addressed the flaw, it turns out that the zero-day sti ...

Older WinRAR versions let malicious archives override the user-specified path via crafted archives, enabling stealthy system ...

A concerning zero-day vulnerability in WinRAR (CVE-2025-8088) allows hackers to hijack your PC. Users are advised to update ...

A Russian speaking hacking group is exploiting a zero day flaw in WinRAR, a sign of the group's growing sophistication and evolution from a cybercrime outfit into a ...

The WinRAR archiving utility has been the target of a couple of large-scale attacks that leverage a 0-day vulnerability. The ...

Home » Security Boulevard (Original) » News » ANOTHER WinRAR 0-Day: Don’t Patch Now — Uninstall It!

The incident illustrates that WinRAR is a perfect vehicle for spreading malware because it has no automated mechanism for installing new updates.

A critical zero-day vulnerability in WinRAR, CVE-2025-8088, is being actively exploited by Russian hacking groups to execute ...

ESET warns that at least two Russian hacking groups are using the zero-day flaw in WinRAR for cyberespionage purposes.

The attacks used spearphishing campaigns to target financial, manufacturing, defense, and logistics companies in Europe and Canada.

A high-severity zero-day in the widely used WinRAR file compressor is under active exploitation by two Russian cybercrime groups. The attacks backdoor computers that open malicious archives attached ...