I see this is doing the rounds
https://cybernews.com/cybercrime/winrar-flaw-ukraine-global-cybercrime-google/
To be clear this is a security flaw that WinRAR patched in July last year.
Why is it a problem now? Because WinRAR, like 7-Zip does not provide autoupdate. 馃槩
I actually made a bot to start tracking these releases @archivetoolstracker at the start of the year (it has yet to post because neither have updated yet in 2026).
If you use either of these follow it or its RSS feed so that you know when to update.