InfoSecBulletin Cybersecurity for mankind
A serious security flaw in WinRAR, a popular file compression tool for Windows, is being exploited by attackers to gain unauthorized access to systems. CVE-2025-8088 is a vulnerability that lets attackers insert harmful files into sensitive system folders unnoticed, giving them control over Windows computers.
The security flaw was first exploited in July 2025 and still poses a risk to millions, even though a patch has been available since July 30, 2025.
LastPass says hackers stole customer data via Klue, supply chain breach
New Apple Exploit Bypasses Boot Defenses, Possibly Affects Millions of iPhones Worldwide
India’s Tata Electronics hit by cyber breach: Hacker target 630 GB record
Anthropic’s Mythos reportedly broke NSA classified systems in hours
OpenAI New Method “Deployment Simulation” Predicts AI Risks Before Deployment
AryStinger botnet infected thousands of D-Link routers globally
Hacker suspected of sending alerts across Brazil
CyberSentinel AI features 33 security tools like Nmap, SQLMap, and ZAP, utilizing Claude and GPT
Barracuda hosts Dhaka roundtable on cyber resilience
CISA Alerts Fortinet Users as FortiBleed Affects 86,644 FortiGate Devices
The flaw has drawn interest from various attackers, including government-backed espionage groups from Russia and China, as well as financially motivated criminals targeting global businesses.
These adversaries exploit vulnerabilities to spread malware, steal login information, and maintain access to hacked systems. The attack uses specially designed RAR files to exploit a path traversal vulnerability, letting files be written to any location on victim computers.
Google Cloud researchers found that this vulnerability is being widely exploited in campaigns against Ukrainian military and government bodies, as well as technology, hospitality, and banking sectors.
Researchers found that attackers exploit a flaw to place malicious files in the Windows Startup folder, making the malware run every time the victim logs in. This method is similar to the tactic used in a prior WinRAR vulnerability (CVE-2023-38831) in 2023, showing how attackers take advantage of unpatched software.
This vulnerability’s quick spread shows that effective defense needs prompt patching and a shift to identifying consistent post-exploitation tactics.
