#1
#1 out of 1
technology1d ago
Zombie ZIP vulnerability lets compressed malware leisurely stroll past 95% of antivirus apps — security suites are blissfully unaware of security issue
- Zombie ZIP lets compressed malware bypass most antivirus solutions by mislabeling data as uncompressed.
- The flaw affects a large portion of AV tools; 60 of 63 suites did not detect the technique six days after disclosure.
- CERT and CVE-2026-0866 have been issued to guide mitigations and tracking.
- Administrators should monitor ZIP traffic and apply updates to reduce risk.
- Attack uses a simple Python proof-of-concept to demonstrate the method.
- The vulnerability could impact both consumers and corporations handling ZIP archives.
- The advisory references are VU#976247 and CVE-2026-0866.
- The report emphasizes the need to scrutinize ZIP traffic within networks.
- Experts warn of potential widespread impact as ZIP-based malware evolves.
Vote 0