New "Zombie ZIP" attack can evade most antivirus scanners

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zombie ZIP Attack Evades Antivirus Detection The newly discovered 'Zombie ZIP' vulnerability, tracked as CVE-2026-0866, allows compressed malware to bypass detection by approximately 98% of antivirus engines. This technique exploits the way ZIP files are handled, enabling malicious code to be executed without triggering alarms. Affected systems include those using common antivirus solutions that are unable to recognize the threat. The vulnerability poses a significant risk to users and organizations relying on these security measures. Current reports indicate that the attack vector is particularly effective against automated updates and file downloads. Security researchers are urging immediate attention to this issue. As of now, no patches have been released to mitigate this vulnerability. The scope of impact is vast, potentially affecting millions of users worldwide. 2 sources 64