Two FSB-linked groups exploit a WinRAR bug patched in July 2025 to steal Ukrainian credentials. The patch exists but adoption remains slow. Two Russian state-linked hacking groups are actively ...

Security researchers have discovered a new flaw in WinRAR that was recently exploited to spread malware through phishing emails. The flaw, CVE-2025-8088, can be harnessed through maliciously crafted ...

A wide range of adversaries including state-sponsored actors are targeting a vulnerability in popular file extraction software WinRAR that was addressed last year. The vulnerability impacts a wide ...

A newly discovered vulnerability in WinRAR has been exploited in the wild by the Russia-aligned cyber group RomCom. According to an advisory published by ESET researchers earlier today, the flaw, ...

Researchers have released a report detailing how a recent WinRAR path traversal vulnerability tracked as CVE-2025-8088 was exploited in zero-day attacks by the Russian 'RomCom' hacking group to drop ...

State-sponsored threat actors from Russia and China continue to throttle the remote code execution (RCE) WinRAR vulnerability in unpatched systems to deliver malware to targets. Researchers at ...