New 'Zombie ZIP' technique lets malware slip past security tools

Zombie ZIP is a proof-of-concept technique that forges ZIP headers (declaring Method=0/STORED while data is actually DEFLATE-compressed) so many AV/EDR engines scan compressed noise and miss embedded payloads; a researcher published samples and a loader, CERT/CC issued a bulletin and a CVE was assigned, but multiple security researchers and MITRE later disputed whether the technique qualifies as a vulnerability since archives become unusable by standard unarchivers and exploitation requires a custom loader.