InfoSecBulletin Cybersecurity for mankind
A serious security flaw in WinRAR, a popular file compression tool for Windows, is being exploited by attackers to gain unauthorized access to systems. CVE-2025-8088 is a vulnerability that lets attackers insert harmful files into sensitive system folders unnoticed, giving them control over Windows computers.
The security flaw was first exploited in July 2025 and still poses a risk to millions, even though a patch has been available since July 30, 2025.
After BDJobs, Directorate of Secondary and Higher Education 390k data surfaced online
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
The flaw has drawn interest from various attackers, including government-backed espionage groups from Russia and China, as well as financially motivated criminals targeting global businesses.
These adversaries exploit vulnerabilities to spread malware, steal login information, and maintain access to hacked systems. The attack uses specially designed RAR files to exploit a path traversal vulnerability, letting files be written to any location on victim computers.
Google Cloud researchers found that this vulnerability is being widely exploited in campaigns against Ukrainian military and government bodies, as well as technology, hospitality, and banking sectors.
Researchers found that attackers exploit a flaw to place malicious files in the Windows Startup folder, making the malware run every time the victim logs in. This method is similar to the tactic used in a prior WinRAR vulnerability (CVE-2023-38831) in 2023, showing how attackers take advantage of unpatched software.
This vulnerability’s quick spread shows that effective defense needs prompt patching and a shift to identifying consistent post-exploitation tactics.
