
- WinRAR flaw CVE-2025-8088 exploited by state-sponsored and criminal groups
- Attackers use ADS feature to deploy malware via malicious archives
- Users urged to update to WinRAR 7.13 or newer for protection
Iconic Windows archiving program WinRAR contains a high-severity vulnerability that allows threat actors to execute arbitrary code on compromised endpoints - and security researchers are now saying the bug is being exploited by numerous hacking collectives, both state-sponsored and otherwise.