A Chinese state-sponsored actor was seen exploiting a WinRAR bug, soon after the Russians.

Russian and Chinese nation-state attackers are exploiting a months-old WinRAR vulnerability, despite a patch that came out ...

China-linked Amaranth-Dragon and Mustang Panda target Southeast Asian governments using WinRAR exploit and PlugX phishing ...

A hacking campaign took just days to exploit a newly disclosed security vulnerability in Microsoft Windows version of WinRAR, ...

Google confirms nation-state and cybercrime groups exploit a patched WinRAR flaw to gain persistence and deploy malware via ...

Russians, Chinese spies, run-of-the-mill crims … Come one, come all. Everyone from Russian and Chinese government goons to ...

A high severity flaw in WinRAR allows crooks to execute malware remotely.

WinRAR doesn't have an auto-update function, meaning PCs are vulnerable until you manually update. The bug is still being ...

CVE-2025-8088, a WinRAR vulnerability patched in July 2025, has been widely exploited by state-sponsored threat actors and cybercriminals.

Or reading the warnings, apparently.

SmarterTools confirmed last week that the Warlock ransomware gang breached its network after compromising an email system, but did not impact business applications or account data.

Researchers disclose rapid exploit chain that let attackers run code via a single malicious web page Security issues continue ...