TechRepublic

WinRAR Zero-Day Exploited by Russian-Linked Hackers RomCom and Paper Werewolf

WinRAR Zero-Day Exploited by Russian-Linked Hackers RomCom and Paper Werewolf Your email has been sent Cybersecurity researchers have identified an actively exploited flaw in WinRAR that attackers are ...
PC Gamer

Still using WinRAR? It might be time for an update, as a zero-day vulnerability is being 'exploited in the wild in the guise of job application documents'

Windows If you want to scrub Windows 11's AI features off the face of the earth some legend has made a tool that does just that AI Anthropic reveals that as few as '250 malicious documents' are all it ...
Ars Technica

High-severity WinRAR 0-day exploited for weeks by 2 groups

A high-severity zero-day in the widely used WinRAR file compressor is under active exploitation by two Russian cybercrime groups. The attacks backdoor computers that open malicious archives attached ...
TechRadar

WinRAR has a serious security flaw - worrying zero-day issue lets hackers plant malware, so patch right away

ESET found a high-severity bug in WinRAR being used by RomCom, a known Russian hacking collective The bug was being used to deploy backdoors allowing full access to compromised computers WinRAR says ...
WeLiveSecurity

Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability

ESET Research discovered a zero-day vulnerability in WinRAR being exploited in the wild in the guise of job application documents; the weaponized archives exploited a path traversal flaw to compromise ...
Infosecurity-magazine.com

New WinRAR Zero-Day Exploited by RomCom Hackers

A newly discovered vulnerability in WinRAR has been exploited in the wild by the Russia-aligned cyber group RomCom. According to an advisory published by ESET researchers earlier today, the flaw, ...
Bleeping Computer

WinRAR zero-day exploited to plant malware on archive extraction

A recently fixed WinRAR vulnerability tracked as CVE-2025-8088 was exploited as a zero-day in phishing attacks to install the RomCom malware. The flaw is a directory traversal vulnerability that was ...
PC World

Update WinRAR now! This security flaw leaves your PC exposed to malware

If you’re still using WinRAR, you should update to version 7.12 as soon as possible. A vulnerability labeled CVE-2025-6218 was recently discovered in older versions of the popular Windows file ...
TweakTown

WinRAR users update ASAP to fix security vulnerability that exposes PCs to hackers

TL;DR: Security researchers identified a critical vulnerability (CVE-2025-6218) in older WinRAR versions that allows hackers to bypass security features and execute malicious files from extracted ...
TweakTown

WinRAR 'high-risk' exploit discovered, make sure you update to the latest release

TL;DR: WinRAR has a critical security vulnerability (CVE-2025-6218) allowing remote code execution via directory traversal in Windows versions. This exploit risks sensitive data and system integrity.
Bleeping Computer

WinRAR flaw bypasses Windows Mark of the Web security alerts

A vulnerability in the WinRAR file archiver solution could be exploited to bypass the Mark of the Web (MotW) security warning and execute arbitrary code on a Windows machine. The security issue is ...