Back Tomshardware

Zombie ZIP vulnerability lets compressed malware leisurely stroll past 95% of antivirus apps

Tomshardware • March 13, 2026

Cybersecurity - digital lock Security researcher says AMD auto-updater downloads software insecurely, enabling remote code execution . Latest Videos ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zombie ZIP Attack Evades Antivirus Detection The newly discovered 'Zombie ZIP' vulnerability, tracked as CVE-2026-0866, allows compressed malware to bypass detection by approximately 98% of antivirus engines. This technique exploits the way ZIP files are handled, enabling malicious code to be executed without triggering alarms. Affected systems include those using common antivirus solutions that are unable to recognize the threat. The vulnerability poses a significant risk to users and organizations relying on these security measures. Current reports indicate that the attack vector is particularly effective against automated updates and file downloads. Security researchers are urging immediate attention to this issue. As of now, no patches have been released to mitigate this vulnerability. The scope of impact is vast, potentially affecting millions of users worldwide. 2 sources 64

Extracted Entities

Zombie ZIP vulnerability lets compressed malware leisurely stroll past 95% of antivirus apps

The full story

Extracted Entities

Attack Types (1)

MITRE ATT&CK (2)

Vulnerabilities (1)