CVE-2025-0411, a MotW bypass vulnerability in 7-Zip, has been exploited in zero-day attacks to deliver malware to Ukrainian entities.
  • slazer2auEnglish
    12•11 hours ago

    How is it a zero day if a patch has been out since November?

    • 𝕸𝖔𝖘𝖘English
      5•7 hours ago

      It was a 0day back then, I guess, so it (in some unknown magic way) keeps that designation forever, apparently.

      Real reason: people want clicks on their slop, so they bait your clicks with nonsense.

  • Alphane MoonEnglish
    2•11 hours ago

    I got hit by what I believe was 0day WinRar vulnerability. Installed a nasty XMR miner that was a massive pain to disable. It took over the whole system and blocked any attempts around removal or even reading relevant articles about the miner.

    Was able to get rid of it via safe mode and finding a cleaning tool from rather niche (region-focused) sources.