CyberDudeBivash ThreatWire – Breaking Cyber Incidents & Zero-Day Alerts 1) WinRAR 0-day used in phishing to deploy RomCom (CVE-2025-8088) What’s new: A directory traversal bug in WinRAR was exploited as a zero-day in email campaigns to drop RomCom malware; fixed in v7.13. Attackers weaponize archives so extraction writes files outside the intended path. Action: Update to 7.13+ immediately; block archive extraction from unknown senders; … Continue reading CyberDudeBivash ThreatWire – Breaking Cyber Incidents & Zero-Day Alerts