Older WinRAR versions let malicious archives override the user-specified path via crafted archives, enabling stealthy system ...

The maintainers of the WinRAR file archiving utility have released an update to address an actively exploited zero-day ...

Iconic archiving platform WinRAR carried a dangerous zero-day vulnerability which could have let hackers plant malware on ...

ESET discovers a Russian hacking group exploiting the vulnerability to deliver malware through phishing emails. WinRAR ...

WinRAR security issue directly affects millions of Windows users in the country and the government is warning them about it.

The popular file archiving tool WinRAR had a serious zero-day vulnerability threatening systems with code execution attacks. While WinRAR has now addressed the flaw, it turns out that the zero-day sti ...

If you use WinRAR or other affected components such as the Windows versions of its command line utilities, UnRAR.dll, or the ...

A recently fixed WinRAR vulnerability tracked as CVE-2025-8088 was exploited as a zero-day in phishing attacks to install the RomCom malware.

Plus, RomCom isn't the only Russia-linked crew to abuse WinRAR holes. Fancy Bear, the GRU cyber-espionage crew, previously exploited CVE-2023-38831 for large-scale phishing campaigns against ...

The vulnerability closed in WinRAR 7.13 was attacked independently by two different groups.

ESET researchers Anton Cherepanov, Peter Košinár and Peter Strýček identified the vulnerability. According to ESET expert ...

A high-severity zero-day in the widely used WinRAR file compressor is under active exploitation by two Russian cybercrime groups. The attacks backdoor computers that open malicious archives attached ...