DanSec

Vulnerability

CVE-2025-8088

In 7 briefs, most recently 10 June 2026. RSS for this tag

Published 2025-08-08

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Known exploited (CISA KEV)

RARLAB WinRAR Path Traversal Vulnerability.

Added 2025-08-12 · used in ransomware campaigns

Coverage in DanSec Daily

  1. Microsoft GitHub repos hijacked in Miasma worm supply chain attack, ServiceNow API breach, Russia-aligned WinRAR espionage, record 206 Patch Tuesday fixes.
  2. Mexican government breach claim, Notepad++ update hijacking distributing a backdoor, and a critical n8n flaw allowing host takeover.
  3. The Polish energy grid cyberattack attributed to ELECTRUM, the eScan update server breach, and the FBI seizure of the RAMP cybercrime forum.
  4. Nike and SoundCloud breaches, ShinyHunters phishing of 100+ organizations, and the exploited Microsoft Office zero-day CVE-2026-21509.
  5. Connex Credit Union breach hits 172,000 members; Citrix NetScaler CVE-2025-6543 exploited against Dutch critical orgs; BlackSuit ransomware infrastructure …
  6. Google Calendar invites hijacking Gemini agents, a WinRAR zero-day (CVE-2025-8088) exploited in the wild, and fake Tesla sites promoted via Google ads.
  7. Columbia University breach hits 870,000, Bouygues discloses 6.4M-customer breach, and Royal/BlackSuit ransomware dismantled after 450+ U.S. victims.