Security researchers at ESET have uncovered a zero-day path traversal vulnerability in the Windows version of WinRAR that has been actively exploited to execute arbitrary code on victims’ systems.…

A new WinRAR vulnerability (CVE-2025-8088) was exploited in the wild by the RomCom group before a patch was available. Users are urged to update to v7.13.

That moment when your file archive turns out to be a digital Trojan horse? Yeah, nobody wants that. A nasty zero-day exploit targeting…

A new WinRAR zero-day vulnerability (CVE-2025-8088) is being exploited by the RomCom cyber-espionage group to deploy malware via malicious archives. Update to v7.13 now.

Introduction

We rarely stop to question the little tools we use every day. WinRAR, for instance — that humble program most of us keep around just to…

Qianxin exposed Bitter APT using a WinRAR path traversal flaw and malicious Office macros to deploy a C# backdoor against military/FinTech targets in Asia. The attack sets up scheduled persistence.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

CyberArmor exposed Autumn Dragon, a China-nexus APT using a WinRAR path traversal flaw (CVE-2025-8088) and DLL sideloading to deploy a Telegram C2 backdoor for espionage in Southeast Asia.