WinRAR has a major security bug

Is it that you can keep using the free trial forever? /s

yeah it's called winrar

This is the best summary I could come up with:

The issue was discovered by Google's Threat Analysis Group (TAG), which discussed the problem in depth in a blog post.

The issue allows an attacker to execute arbitrary code when someone opens a zipped file.

"Cybercrime groups began exploiting the vulnerability in early 2023, when the bug was still unknown to defenders.

"TAG has observed government-backed actors from a number of countries exploiting the WinRAR vulnerability as part of their operations."

While WinRAR is a useful piece of software used by over half a billion people, it is perhaps more famous as a meme or as the butt of jokes.

When Microsoft announced native support for the .rar file format, WinRAR shared a meme on Twitter (now called X).

The original article contains 333 words, the summary contains 119 words. Saved 64%. I'm a bot and I'm open source!

TLDR Some folks just never update their software. Idk if this is just a Windows problem but damn. I remember reading about this 0-day months ago and thinking to myself malware groups will have a field day before the vulnerability finally becomes dead just because of this.

Again? Is it the same one with 7zip?

Maybe because of the fact that they can't pay their staff, because nobody pays to use their product.