
In a chilling reminder of the ever-looming threats in the digital realm, a critical zero-day vulnerability in WinRAR, a popular file compression tool used by millions worldwide, has been uncovered and actively exploited by a notorious Russia-aligned cyber group known as RomCom. Tracked under the identifier CVE-2025-8088, this path traversal flaw allows malicious actors to embed harmful files within seemingly










