Carzy Zarx’s PC Gaming Emporium - Catch Up on All the Latest PC Gaming Related News

[JEMC]

If you have Winrar but haven't updated it in a while, you may want to change that:

Google says a WinRAR exploit for Windows is in 'widespread' use by government-backed threat actors 'linked to Russia and China'
https://www.pcgamer.com/software/security/google-says-a-winrar-exploit-for-windows-is-in-widespread-use-by-government-backed-threat-actors-linked-to-russia-and-china/
https://cloud.google.com/blog/topics/threat-intelligence/exploiting-critical-winrar-vulnerability">Google has warned that well-known and already-patched exploit for the WinRAR file archiving and compression tool for Windows remains in "widespread, active" use by "government-backed threat actors linked to Russia and China".

Known as critical vulnerability CVE-2025-8088, the exploit identified was in July last year and was posted on the National Vulnerability Database back in August. It's widely known and numerous other bodies, even including the UK's NHS, have registered the threat.

The exploit was actually addressed by the makers of WinRAR, RARLAB, with the 7.13 update on July 30 last year. Of course, that isn't going to help anyone running earlier versions of WinRAR.