A new technique dubbed "Zombie ZIP" helps conceal payloads in compressed files specially created to avoid detection from security solutions such as antivirus and endpoint detection and response (EDR) ...
Something else to worry about.
Some file types have signatures/hashes/fields that can be validated by NSTool, but this mode isn't enabled by default.