WinRAR zero-day exploited in espionage attacks against high-value targets

ESET researchers disclosed that a previously unknown WinRAR zero-day (CVE-2025-8088) is being actively exploited by Russia-aligned group RomCom in spearphishing campaigns targeting financial, manufacturing, defense, and logistics organizations in Europe and Canada; the flaw enables arbitrary code execution via malicious archives and users are urged to update to WinRAR 7.13.