7-Zip gets updated to fix critical vulnerability

A serious security flaw has recently been discovered in 7-Zip, a popular file compression tool. This vulnerability has the potential to compromise the security of systems where the application is used. But what exactly does this mean for users?

Let’s break it down. The flaw in question allows attackers to bypass Windows’ Mark of the Web (MotW) feature, which is designed to identify and apply certain restrictions to files downloaded from the internet. In simpler terms, MotW helps protect your system by flagging files that may pose a risk. However, it has been found that this security feature can be circumvented when using 7-Zip.

To give you a bit of background, 7-Zip introduced support for MotW back in June 2022 with version 22.00. This meant that files extracted using 7-Zip would retain the MotW flag, providing an added layer of security when opened on your system. Unfortunately, it has now come to light that there are ways to bypass this functionality, leaving users vulnerable to downloading and executing malicious files more easily.

The flaw was initially discovered by researchers at Trend Micro, who promptly reported it to the creators of 7-Zip. They demonstrated how this vulnerability could be exploited to facilitate the execution of malware on unsuspecting victims’ systems. Thankfully, the developers acted swiftly, releasing a fix on November 30, 2024, with the release of 7-Zip version 24.09.

However, there’s a catch. 7-Zip does not have an automatic update system, which means that many users may still be running older versions of the software without even realizing it. This is where it becomes crucial for 7-Zip users to take action. It is highly recommended that you check if you are using the latest version of 7-Zip to ensure that you are not exposed to this vulnerability. You can easily download the most recent version directly from the project’s website.

In today’s digital landscape, where cyber threats are constantly evolving, staying vigilant and keeping your software up to date is essential. By taking a proactive approach to security, you can minimize the risks and protect yourself from potential attacks. So, don’t delay—update your 7-Zip today and keep your system safe from harm.