Search: “7z”

108 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 39 Malware 38 Vulnerability 9 Exploit / PoC 9 Data breach 5 Threat actor 5 AI tools & infra 1 Phishing & fraud 1 Policy & legal 1

SeverityAll critical 22 high 60 medium 25 low 0 info 1

ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability

Zero Day Initiative discloses CVE-2026-20215, an integer overflow in ClamAV's 7z archive parsing enabling remote code execution, rated CVSS 8.4.

The Zero Day Initiative published ZDI-26-583 for an integer overflow in Clam AntiVirus's 7z archive parsing. A remote attacker can execute arbitrary code when the antivirus processes a crafted archive, with attack vectors varying by implementation. The flaw is tracked as CVE-2026-20215 and rated CVSS 8.4. The advisory does not mention active exploitation.

ZDI Published AdvisoriesAug 13, 05:00 UTC · Aug 13, 2026Vulnerability CVE-2026-202151

Introducing ToyMaker, an initial access broker working in cahoots with double extortion gangs

Cisco TalosApr 23, 10:00 UTC · Apr 23, 2025Ransomware

An X user claimed a 7-Zip zero-day vulnerability, but 7

Security AffairsDec 31, 00:09 UTC · Dec 31, 2024Exploit / PoC

Kaspersky crimeware report: FakeSG, Akira and AMOS

Kaspersky SecurelistDec 13, 10:00 UTC · Dec 13, 2023Ransomware

NullMixer drops Redline Stealer, SmokeLoader and other malware

Kaspersky SecurelistSep 26, 08:00 UTC · Sep 26, 2022Malware

Experts spotted P2P worm spreading Crypto

Security AffairsJul 23, 13:28 UTC · Jul 23, 2019Malware

Necurs Botnet involved in massive ransomware campaigns at the end of 2017

Security AffairsJan 2, 20:06 UTC · Jan 2, 2018Ransomware

Shade: not by encryption alone

Kaspersky SecurelistAug 10, 10:58 UTC · Aug 10, 2016Ransomware

Harmful Help: Analyzing a Malicious Compiled HTML Help File Delivering Agent Tesla

Palo Alto Unit 42Jun 5, 22:35 UTC · Jun 5, 2024Malware

Prometei botnet improves modules and exhibits new capabilities in recent updates

Cisco TalosMar 9, 13:02 UTC · Mar 9, 2023Malware CVE-2019-07081

Vulnerability Walkthrough: 7zip CVE-2016

Cisco TalosNov 30, 15:00 UTC · Nov 30, 2017Vulnerability CVE-2016-2334

Investigation Report for the September 2014 Equation malware detection incident in the US

Kaspersky SecurelistNov 16, 10:00 UTC · Nov 16, 2017Malware

From BlackEnergy to ExPetr

Kaspersky SecurelistJun 30, 21:39 UTC · Jun 30, 2017Ransomware

Operation Ghoul: targeted attacks on industrial and engineering organizations

Kaspersky SecurelistAug 17, 08:56 UTC · Aug 17, 2016Malware

The Poisoned Archives

Cisco TalosJun 21, 14:36 UTC · Jun 21, 2016Vulnerability CVE-2016-4300 CVE-2016-4301 CVE-2016-4302

Winnti returns with PlugX

Kaspersky SecurelistApr 15, 12:47 UTC · Apr 15, 2013Malware

“Red October”. Detailed Malware Description 5. Second Stage of Attack

Kaspersky SecurelistJan 17, 16:05 UTC · Jan 17, 2013Malware

RTK reports token savings, but our cost benchmarks disagree

Quesma's $1,500 benchmark found RTK cuts reported token output but changes Claude Code and DeepSeek coding costs by only about 5% on Terminal-Bench 2.1.

Quesma benchmarked RTK (Rust Token Killer), a popular tool with 79k GitHub stars that filters terminal output for AI coding agents, whose README claims up to 90% output reduction. Across 1,740 Terminal-Bench 2.1 attempts running Claude Code with Fable 5.0 and OpenCode with DeepSeek V4 Pro 0813, total costs moved only -5% for Fable and +5% for DeepSeek, with pass rates dropping 1-2%. RTK's own rtk gain metric reported 349.2 million tokens saved (an 89% reduction) across 445 DeepSeek attempts, but this did not correlate with actual cost savings, and cached terminal-output reads cost as little as 1/10 to 1/30 of regular input tokens. A bug in rtk find 0.45.0 caused one agent to loop with 339 consecutive errors, costing roughly 9x the baseline attempt, though the task still passed.