News

The Hacker News4h
WinRAR Zero-Day Under Active Exploitation – Update to Latest Version Immediately
The maintainers of the WinRAR file archiving utility have released an update to address an actively exploited zero-day ...
SecurityWeek1h
Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada
WinRAR patched CVE-2025-8088, a zero-day exploited by Russia RomCom in attacks on financial, defense, manufacturing and ...
it-daily.net4h
Security vulnerability in WinRAR actively exploited
ESET researchers Anton Cherepanov, Peter Košinár and Peter Strýček identified the vulnerability. According to ESET expert ...
WinRAR: Security vulnerability is already under attack
A security vulnerability in WinRAR allows malicious code to be executed. It is already under attack in the wild.
WeLiveSecurity1h
Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability
ESET Research discover a zero-day vulnerability in WinRAR being exploited in the wild in the guise of job application ...
Lowyat.NET15h
WinRAR Security Flaw Lets Malware In During Windows Startup
Ever since Windows 11 started supporting the RAR archive format, there has been little reason to download – or buy – WinRAR ...
Security flaw in WinRAR allows malware to install at Windows startup
Once a malicious file is placed in these folders, it can install malware or open a hidden backdoor without any further action from the user.
Tom's Hardware on MSN22h
Newly discovered WinRAR exploit linked to Russian hacking group, can plant backdoor malware — zero day hack requires manual update to fix
A new vulnerability in file archiving software WinRAR has come to light that can potentially install backdoor malware on ...
PCMag on MSN1h
Nvidia, AMD to Pay 15% of Revenue From China AI Chip Sales to US Government
An unprecedented deal has been made for Nvidia and AMD to sell its specialist chips in China in trade for 15% of the total ...
libarchive: Security vulnerability turns out to be critical
A security vulnerability in libarchive turns out to be a critical risk. The CERT-Bund has now discovered the update.