Security researchers at ESET have uncovered a zero-day path traversal vulnerability in the Windows version of WinRAR that has been actively exploited to execute arbitrary code on victims’ systems.…

A new WinRAR vulnerability (CVE-2025-8088) was exploited in the wild by the RomCom group before a patch was available. Users are urged to update to v7.13.

That moment when your file archive turns out to be a digital Trojan horse? Yeah, nobody wants that. A nasty zero-day exploit targeting…

A new WinRAR zero-day vulnerability (CVE-2025-8088) is being exploited by the RomCom cyber-espionage group to deploy malware via malicious archives. Update to v7.13 now.

Introduction

We rarely stop to question the little tools we use every day. WinRAR, for instance — that humble program most of us keep around just to…

Qianxin exposed Bitter APT using a WinRAR path traversal flaw and malicious Office macros to deploy a C# backdoor against military/FinTech targets in Asia. The attack sets up scheduled persistence.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

CyberArmor exposed Autumn Dragon, a China-nexus APT using a WinRAR path traversal flaw (CVE-2025-8088) and DLL sideloading to deploy a Telegram C2 backdoor for espionage in Southeast Asia.

CISA added two actively exploited zero-days to the KEV: a WinRAR directory traversal (CVE-2025-6218) planting malware in Startup folder, and a Windows Cloud Files UAF for SYSTEM privileges.

APT-C-53 has once again intensified its distribution of malicious attachments targeting organizations in Ukraine. The latest wave of

A cyber-espionage group known for hunting Russian organizations has upgraded its arsenal, deploying malicious Excel add-ins to slip past defenses and install a new backdoor. A new report from Inte…

The Excel format—long regarded as a harmless office staple—is increasingly being exploited as an entry point for cyberattacks.

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

The Google Threat Intelligence Group (GTIG) has disclosed the extensive exploitation of a critical vulnerability, designated CVE-2025-8088, residing