The incident illustrates that WinRAR is a perfect vehicle for spreading malware because it has no automated mechanism for installing new updates.

ESET warns that at least two Russian hacking groups are using the zero-day flaw in WinRAR for cyberespionage purposes.

ESET Research discover a zero-day vulnerability in WinRAR being exploited in the wild in the guise of job application ...

A high-severity zero-day in the widely used WinRAR file compressor is under active exploitation by two Russian cybercrime groups. The attacks backdoor computers that open malicious archives attached ...

Iconic archiving platform WinRAR carried a dangerous zero-day vulnerability which could have let hackers plant malware on ...

Researchers have released a report detailing how a recent WinRAR path traversal vulnerability tracked as CVE-2025-8088 was ...

A critical zero-day vulnerability in WinRAR, CVE-2025-8088, is being actively exploited by Russian hacking groups to execute ...

The maintainers of the WinRAR file archiving utility have released an update to address an actively exploited zero-day ...

A few weeks earlier 'zeroplayer' advertised an $80K WinRAR 0-day exploit Russia-linked attackers found and exploited a ...

A newly discovered vulnerability in WinRAR has been exploited in the wild by the Russia-aligned cyber group RomCom. According ...

ESET discovers a Russian hacking group exploiting the vulnerability to deliver malware through phishing emails. WinRAR ...