7-ZIP 0-DAY WAS EXPLOITED IN RUSSIA'S ONGOING INVASION OF UKRAINE

Summary from the TLDR InfoSec newsletter

Russia exploited a zero-day vulnerability in 7-Zip that bypassed Windows' Mark of the Web (MotW) security feature. The flaw, tracked as CVE-2025-0411, allowed malware hiding in nested archives to evade detection when targeting Ukrainian agencies.