News

Russian 'RomCom' Hackers Exploit WinRAR Flaw Via Phishing Emails
ESET warns that at least two Russian hacking groups are using the zero-day flaw in WinRAR for cyberespionage purposes.
WeLiveSecurity21h
Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability
ESET Research discover a zero-day vulnerability in WinRAR being exploited in the wild in the guise of job application ...
The Register on MSN12h
Russia's RomCom among those exploiting a WinRAR 0-day in highly-targeted attacks
A few weeks earlier 'zeroplayer' advertised an $80K WinRAR 0-day exploit Russia-linked attackers found and exploited a ...
WinRAR has a serious security flaw - worrying zero-day issue lets hackers plant malware, so patch right away
Iconic archiving platform WinRAR carried a dangerous zero-day vulnerability which could have let hackers plant malware on ...
Infosecurity Magazine16h
New WinRAR Zero-Day Exploited by RomCom Hackers
A newly discovered vulnerability in WinRAR has been exploited in the wild by the Russia-aligned cyber group RomCom. According ...
Details emerge on WinRAR zero-day attacks that infected PCs with malware
Researchers have released a report detailing how a recent WinRAR path traversal vulnerability tracked as CVE-2025-8088 was ...
High-severity WinRAR 0-day exploited for weeks by 2 groups
A high-severity zero-day in the widely used WinRAR file compressor is under active exploitation by two Russian cybercrime groups. The attacks backdoor computers that open malicious archives attached ...
SecurityWeek21h
Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada
WinRAR patched CVE-2025-8088, a zero-day exploited by Russia RomCom in attacks on financial, defense, manufacturing and ...
WinRAR zero-day exploited to plant malware on archive extraction
A recently fixed WinRAR vulnerability tracked as CVE-2025-8088 was exploited as a zero-day in phishing attacks to install the ...
The Hacker News1d
WinRAR Zero-Day Under Active Exploitation – Update to Latest Version Immediately
The maintainers of the WinRAR file archiving utility have released an update to address an actively exploited zero-day ...
WeLiveSecurity10h
WinRAR zero-day exploited in espionage attacks against high-value targets
The attacks used spearphishing campaigns to target financial, manufacturing, defense, and logistics companies in Europe and Canada.