
The revelation of a new zero-day Windows vulnerability by Israeli threat intelligence firm ClearSky Cyber Security is an eye-opener, especially since it is being actively exploited by a Chinese APT group known as Mustang Panda. This vulnerability, which has yet to be assigned a CVE number, involves a previously unknown UI flaw in how Windows handles compressed ‘RAR’ files. Disturbingly,