Check Point weekly brief: utility and app breaches, exploited zero-days
CenterPoint says more than 1 million Texans were exposed, while Burger King Japan cites about 11.18 million members.
64
Product
WinRAR
- Mentions · 7d0
- Mentions · 30d9
- All mentions12
- First seenAug 17, 2026
- Last mentioned11d ago
Timeline
12 articles · newest firstThe Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Talos says 2026 CVE volume passed 70,000 while KEV growth lagged, so discovery is not exploitation.
58
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
Silent Lynx used a WinRAR flaw and phishing to plant reverse shells on CIS government targets.
76
Suspected Kazakhstan-linked hackers target governments across former Soviet states
Suspected Kazakhstan-linked UAT-6275 ran at least eight espionage campaigns against former Soviet governments since 2025.
76
UAT-6275 Hackers Exploit WinRAR Flaw to Target CIS Government Organizations
UAT-6275 used WinRAR CVE-2025-8088 to plant reverse shells on CIS government systems via malicious archives.
78
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
Kazakhstan-linked UAT-6275 targeted CIS governments using phishing and a WinRAR exploit.
78
TAG-193’s Regional Espionage Operations
TAG-193 ran regional government espionage, adding WinRAR CVE-2025-8088 exploitation to its phishing and reverse-shell toolkit.
76
Earth Sirrush Uses PNG Steganography and Malicious Notepad++ Plugins to Deploy Espionage Malware
Russia-aligned Earth Sirrush hides espionage malware in PNGs and Notepad++ plugins against Ukrainian government and defense targets.
74
Earth Sirrush Espionage Activity May Support Sandworm Operations Against Ukraine
Earth Sirrush has spear-phished Ukrainian government and logistics since 2022, possibly feeding Sandworm.
78
[object Object]
The DarkMe malware is now being delivered via simple phishing emails, abandoning the zero-days previously used to deliver the payload.
72
Researchers Uncover 10,000+ Malware Loaders Behind YouTube and SEO Poisoning Campaign
Unit 42 uncovers CL-CRI-1171, a two-year pay-per-install campaign distributing 10,000+ OfferLoader samples via YouTube and SEO poisoning.
66
Fake CVE-2023
A fake PoC for WinRAR RCE CVE-2023-40477 posted on GitHub actually deploys VenomRAT through a multi-step infection chain targeting researchers.
40
Related CVEs
by mentions- CVE-2025-808894%8.4WinRAR Path Traversal (CVE-2025-8088) Enables Arbitrary Code Execution
- CVE-2026-10493587%8.6Auth Bypass to Command Execution in Ivanti Connect Secure
- CVE-2023-38831100%7.8Code Execution in RARLAB WinRAR via Crafted ZIP File/Folder Name Confusion
- CVE-2026-9722918%10.0Unauthenticated RCE in GitLab CE/EE via CI/CD regex
- CVE-2026-9695110%8.8Windows Shell command injection bypasses a security feature
- CVE-2023-2515785%9.8GeoServer: GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web…
- CVE-2026-3502925%8.7Broken Access Control in LiteLLM AI Gateway Enables Authenticated RCE
- Authenticated SSRF in LiteLLM Proxy via user_config
Appears with
- Recorded Futureorganization · 6
- UAT-6275threat actor · 6
- Cisco Talosorganization · 6
- Silent Lynxthreat actor · 5
- TAG-193threat actor · 5
- RARLABvendor · 4
- Microsoftvendor · 3
- GitHubproduct · 3
- Laplasmalware · 3
- CIS government organizationsvictim · 2
- Fortinetvendor · 2
- Notepad++product · 2
- Palo Alto Networksorganization · 2
- Chvostmalware · 2
- UAC-0099threat actor · 2
- ASHVEINmalware · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.