Two malware campaigns weaponize open-source software to target executives and cloud systems, combining social engineering ...

Google has warned that well-known and already-patched exploit for the WinRAR file archiving and compression tool for Windows ...

Researchers disclose rapid exploit chain that let attackers run code via a single malicious web page Security issues continue ...

WinRAR doesn't have an auto-update function, meaning PCs are vulnerable until you manually update. The bug is still being widely exploited, Google security researchers warn.

WebAssembly runtime introduces experimental async API and support for dynamic linking in WASIX, enabling much broader support ...

Google confirms nation-state and cybercrime groups exploit a patched WinRAR flaw to gain persistence and deploy malware via ...

The WinRAR vulnerability tracked as CVE-2025-8088 was discovered and patched in July 2025, but the popular file archiver continues to suffer from its fallout. According to ...

Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.

CVE-2025-8088, a WinRAR vulnerability patched in July 2025, has been widely exploited by state-sponsored threat actors and cybercriminals.

Or reading the warnings, apparently.