Zip encryption is vulnerable to known-plaintext attacks. Implementation quality also is an issue; WinZip's is particularly bad. No source, I'm afraid.
Microsoft cloud services are scanning for malware by peeking inside users’ zip files, even when they’re protected by a password, several users reported on Mastodon on Monday. Compressing file contents ...