7-Zip Mark-of-the-Web Bypass Lets Malicious Files Evade Windows SmartScreen

**Executive summary:** 7-Zip 24.09, by default, does not propagate the Windows Mark-of-the-Web (Zone.Identifier) from downloaded ZIP files to extracted executables, which can prevent Windows SmartScreen from performing reputation checks and enable phishing-delivered malware to run without the usual warning; defenders should enable Zone.Id propagation where appropriate, validate endpoint settings, and test realistic download/extraction workflows.