Phishing emails with RAR archives exploit Linux filename injection to deliver VShell backdoor, bypassing antivirus defenses ...

ESET Research discover a zero-day vulnerability in WinRAR being exploited in the wild in the guise of job application ...

Older WinRAR versions let malicious archives override the user-specified path via crafted archives, enabling stealthy system ...

A high-severity zero-day in the widely used WinRAR file compressor is under active exploitation by two Russian cybercrime groups. The attacks backdoor computers that open malicious archives attached ...

The popular file archiving tool WinRAR had a serious zero-day vulnerability threatening systems with code execution attacks.

Home » Security Boulevard (Original) » News » ANOTHER WinRAR 0-Day: Don’t Patch Now — Uninstall It!

The maintainers of the WinRAR file archiving utility have released an update to address an actively exploited zero-day vulnerability.

Plus, RomCom isn't the only Russia-linked crew to abuse WinRAR holes. Fancy Bear, the GRU cyber-espionage crew, previously exploited CVE-2023-38831 for large-scale phishing campaigns against ...

The latest version of WinRAR patches a vulnerability that could put Windows users in danger, so update the app now if you ...

Once a malicious file is placed in these folders, it can install malware or open a hidden backdoor without any further action from the user.

Researchers have released a report detailing how a recent WinRAR path traversal vulnerability tracked as CVE-2025-8088 was ...

ESET warns that at least two Russian hacking groups are using the zero-day flaw in WinRAR for cyberespionage purposes.