Security researchers have discovered a flaw in WinRAR that allows hackers to deploy malware on Windows devices by bypassing the Mark of the Web security mechanism.
The vulnerability was found in all older versions of WinRAR and has been addressed in the latest version, 7.11. Users are advised to update their WinRAR to the latest version.
The flaw is related to a symlink pointing at an executable, where the Mark of the Web data is ignored and the warning is not shown.
To mitigate the risk, users should keep their archivers up to date and exercise caution while downloading files from the internet.