Cybersecurity researchers identified a critical vulnerability (CVE-2025-33028) in WinZip that allows attackers to bypass Windows’ Mark-of-the-Web security, enabling malicious code execution without alerts. This flaw affects versions up to 29.0 and poses risks of unauthorized access and data theft. Users are urged to avoid untrusted archives and use alternatives until a patch is available.

News – Cyber attack on collection agency compromised Vitruvian Health’s patient data – teiss
A cyber attack on a collection agency has jeopardized Vitruvian Health’s patient data.