Back to today’s briefing

Story perspectives

Critical WinRAR Flaw Exploited by RomCom Group!

8/11/2025

49 8

Summary

Story summary

A critical zero-day vulnerability (CVE-2025-8088) in WinRAR has been uncovered by ESET researchers, revealing that the Russia-aligned RomCom group is exploiting it in cyberespionage efforts against European and Canadian companies. Users are strongly advised to upgrade to version 7.13 to protect themselves, as this flaw enables attackers to run harmful code through malicious archives.

1 of 1

Story summary

A critical zero-day vulnerability (CVE-2025-8088) in WinRAR has been uncovered by ESET researchers, revealing that the Russia-aligned RomCom group is exploiting it in cyberespionage efforts against European and Canadian companies. Users are strongly advised to upgrade to version 7.13 to protect themselves, as this flaw enables attackers to run harmful code through malicious archives.