7-Zip bug could allow a bypass of a Windows security feature. Update now

A vulnerability in 7-Zip allowed attackers to bypass Windows' Mark-of-the-Web (MotW) by placing specially crafted nested archives so that alternate data streams (which carry MotW) were not preserved when extracting files; this could cause Office documents to open outside Protected View and enable macros. The vendor released a patch in 7-Zip 24.09 and the report advises updating, enabling archive scanning in anti-malware tools, and exercising caution when opening downloaded archives.