Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025

Back Thehackernews

Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025

Thehackernews •[email protected] (The Hacker News) • January 28, 2026

Share: View original

Discover how leading MSSPs use AI to automate security management, boost margins, and scale services without extra headcount.

Join cybersecurity leaders Kumar Saurabh and Francis Odum to learn how to build, buy, and automate smarter for a modern, efficient SOC.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exploitation of WinRAR Path Traversal Flaw Continues Amid CISA Warning The CVE-2025-8088 vulnerability in WinRAR is being exploited by various threat actors for initial access and to deploy malware. The flaw allows attackers to use Alternate Data Streams to write malicious files to arbitrary locations, including the Windows Startup folder. In response to ongoing attacks, the vulnerability has been added to CISA's Known Exploited Vulnerabilities list, with federal agencies ordered to remediate it by December 30, 2025. 12 sources 42

Extracted Entities

Attack Types (1)

Zero-day Exploit

Tools (1)