WinRAR security bug may have put more than 500 million users at risk for over a decade