APTs, Cybercriminals Widely Exploiting WinRAR Vulnerability

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

WinRAR Vulnerability CVE-2025-8088 Exploited by State Actors Russian and Chinese state-sponsored threat actors have been exploiting a vulnerability in WinRAR, identified as CVE-2025-8088, since July 2025. Multiple cybercriminals are also taking advantage of this zero-day vulnerability, which has been widely reported in the cybersecurity community. 2 sources 39