Search: “WinRAR”

37 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 78 Ransomware 72 Malware 70 Threat actor 45 Exploit / PoC 45 Data breach 12 Phishing & fraud 4 Tools 1 Advisory 1

SeverityAll critical 140 high 138 medium 48 low 2 info 0

On the StrongPity Waterhole Attacks Targeting Italian and Belgian Encryption Users

Kaspersky SecurelistOct 3, 23:40 UTC · Oct 3, 2016Exploit / PoC

60

WinRAR Zero-Day Under Active Exploitation

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2025Exploit / PoC in the wildCVE-2025-8088 CVE-2023-38831 CVE-2025-6218+2 CVEs

60

Latest WinRAR Flaw Being Exploited in the Wild to Hack Windows Computers

The Hacker NewsFeb 26, 13:45 UTC · Feb 26, 2019Exploit / PoC in the wildCVE-2018-20250

60

Recently fixed WinRAR bug actively exploited in the wild

Security AffairsMar 15, 14:00 UTC · Mar 15, 2019Exploit / PoC in the wildCVE-2018-20250

60

WinRAR zero-day was exploited by two threat actors (CVE-2025-8088)

Help Net SecurityNov 19, 15:20 UTC · Nov 19, 2025Exploit / PoC CVE-2025-8088 CVE-2025-55188

60

WinRAR zero

Security AffairsOct 1, 06:59 UTC · Oct 1, 2015Exploit / PoC

60

Critical bug in WINRAR affects all versions released in the last 19 years

Security AffairsFeb 23, 16:13 UTC · Feb 23, 2019Exploit / PoC

60

High-severity WinRAR 0

Ars Technica · SecurityAug 12, 00:13 UTC · Aug 12, 2025Exploit / PoC in the wildCVE-2025-8088 CVE-2025-6218

60

Two groups exploit WinRAR flaws in separate cyber

The RecordAug 11, 16:23 UTC · Aug 11, 2025Exploit / PoC CVE-2025-8088 CVE-2025-6218

60

WinRAR zero-day exploited by RomCom hackers in targeted attacks

Help Net SecurityAug 11, 00:00 UTC · Aug 11, 2025Exploit / PoC in the wildCVE-2025-8088

60

500 million WinRAR users open to compromise via a 19-year-old flaw

Help Net SecurityDec 14, 14:20 UTC · Dec 14, 2023Exploit / PoC

60

U.S. CISA adds Microsoft Internet Explorer, Microsoft Office Excel, and WinRAR flaws to its Known Exploited Vulnerabilities catalog

Security AffairsAug 14, 00:12 UTC · Aug 14, 2025Exploit / PoC in the wildCVE-2013-3893 CVE-2007-0671 CVE-2025-8088

60

WinRAR 0-day that uses poisoned JPG and TXT files under exploit since April

Ars Technica · SecurityAug 23, 19:34 UTC · Aug 23, 2023Exploit / PoC in the wildCVE-2023-38831 CVE-2018-20250

60

New WinRAR Zero

Infosecurity MagazineAug 11, 16:00 UTC · Aug 11, 2025Exploit / PoC in the wildCVE-2025-8088 CVE-2023-36884 CVE-2024-9680

60

Attackers exploited WinRAR zero-day for months to steal money from brokers (CVE-2023-38831)

Help Net SecurityOct 18, 08:32 UTC · Oct 18, 2023Exploit / PoC CVE-2023-38831 CVE-2023-40477

60

Zero-Day Exploit in WinRAR File

Schneier on SecurityAug 19, 11:07 UTC · Aug 19, 2025Exploit / PoC

60

Experts Uncover DarkCasino: New Emerging APT Threat Exploiting WinRAR Flaw

The Hacker NewsNov 17, 05:08 UTC · Nov 17, 2023Exploit / PoC CVE-2023-38831

60

WinRAR Security Flaw Exploited in Zero

The Hacker NewsAug 24, 11:12 UTC · Aug 24, 2023Exploit / PoC CVE-2023-38831 CVE-2023-40477

60

Elfin Hacking Group Targets Multiple U.S. and Saudi Arabian Firms

The Hacker NewsMar 28, 08:18 UTC · Mar 28, 2019Exploit / PoC in the wildCVE-2018-20250

60

IT threat evolution Q1 2019

Kaspersky SecurelistMay 23, 10:00 UTC · May 23, 2019Exploit / PoC CVE-2019-0797 CVE-2018-8589

60

FSB Group Gamaredon Hides Worm in Windows Data Streams

Infosecurity MagazineJun 1, 11:00 UTC · Jun 1, 2026Exploit / PoC CVE-2025-8088

60

Week in review: Microsoft fixes exploited Office zero-day, Fortinet patches FortiCloud SSO flaw

Help Net SecurityFeb 1, 00:00 UTC · Feb 1, 2026Exploit / PoC in the wildCVE-2026-21509 CVE-2026-24858 CVE-2025-8088+1 CVEs

60

Week in review: Cybersecurity cheat sheets, widely exploited Cisco zero-day, KeePass-themed malvertising

Help Net SecurityOct 22, 00:00 UTC · Oct 22, 2023Exploit / PoC in the wildCVE-2023-20198 CVE-2023-4966 CVE-2023-38831

60

StrongPity APT - Waterhole attacks against Italian and Belgian users

Security AffairsJul 18, 13:42 UTC · Jul 18, 2019Exploit / PoC CVE-2011-0611

60

How NTLM is being abused in 2025 cyberattacks

Kaspersky SecurelistNov 26, 15:53 UTC · Nov 26, 2025Exploit / PoC in the wild

60

U.S. CISA adds N-able N-Central flaws to its Known Exploited Vulnerabilities catalog

Security AffairsAug 14, 08:03 UTC · Aug 14, 2025Exploit / PoC in the wildCVE-2025-8875 CVE-2025-8876

60

Multi-national warning issued over Russia’s targeting of logistics, tech firms

CyberScoopMay 21, 18:41 UTC · May 21, 2025Exploit / PoC in the wildCVE-2023-23397 CVE-2023-38831

60

Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws

The Hacker NewsApr 6, 09:08 UTC · Apr 6, 2025Exploit / PoC CVE-2025-24061 CVE-2025-24071 CVE-2025-26633

60

Hackers Use Corrupted ZIPs and Office Docs to Evade Antivirus and Email Defenses

The Hacker NewsDec 4, 04:48 UTC · Dec 4, 2024Exploit / PoC

60

Critical Exchange Server Flaw (CVE-2024

The Hacker NewsFeb 17, 07:27 UTC · Feb 17, 2024Exploit / PoC in the wildCVE-2024-21410 CVE-2024-21351 CVE-2024-21412+1 CVEs1

60

CISA added 9 new flaws to the Known Exploited Vulnerabilities Catalog

Security AffairsFeb 16, 10:05 UTC · Feb 16, 2022Exploit / PoC in the wildCVE-2022-24086 CVE-2022-0609 CVE-2019-0752+9 CVEs

60

IT threat evolution Q3 2021

Kaspersky SecurelistNov 26, 12:00 UTC · Nov 26, 2021Exploit / PoC CVE-2021-40444

60

‘StrongPity’ hacking group does just enough to get around defenses

CyberScoopJul 18, 14:20 UTC · Jul 18, 2019Exploit / PoC in the wild

60

CVE-2019-11707 Firefox Zero-Day exploited to infect cryptocurrency exchanges

Security AffairsJun 20, 19:58 UTC · Jun 20, 2019Exploit / PoC CVE-2019-11707

60

New Adobe Flash Zero-Day Exploit Found Hidden Inside MS Office Docs

The Hacker NewsDec 6, 11:22 UTC · Dec 6, 2018Exploit / PoC CVE-2018-15982 CVE-2018-15983

60

Hackers Use New Flash Zero-Day Exploit to Distribute FinFisher Spyware

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2017Exploit / PoC in the wildCVE-2017-11292 CVE-2017-8759

60

ISPs 'likely' helped infect targets of state surveillance

CyberScoopSep 21, 19:45 UTC · Sep 21, 2017Exploit / PoC in the wild

60