Security News New Amaranth Dragon cyberespionage group exploits WinRAR flaw BleepingComputer Daniel Bender 04 Feb 2026 A new threat actor called Amaranth Dragon, linked to APT41 state-sponsored Chinese operations, exploited the CVE-2025-8088 vulnerability in WinRAR in espionage attacks on government and law enforcement agencies.