CISA has expanded its KEV catalog with new SolarWinds, Notepad++, and Apple flaws, including two exploited as zero-days.

Notepad++ targeted and used to deliver poisoned updates to a select group of victims.

Suspected Chinese state-backed hackers reportedly hijacked Notepad++'s update system for months, targeting select users and ...

State-backed attackers hijacked Notepad++ update traffic via a hosting provider breach, redirecting users to malicious downloads since June 2025.

Notepad++ has been compromised in a sophisticated nation-state cyberattack. Learn about the security breach, the ...

In an alarming revelation, the popular text editor Notepad++ has confirmed that its update service was compromised in a targeted attack linked to state-sponsored cybercriminals. This incident sheds ...

State-sponsored threat actors compromised the popular code editor's hosting provider to redirect targeted users to malicious ...

Last year, the creator of Notepad++ rolled out an update for the text and source code editor after security experts reported ...

Notepad++ has shared additional details on the supply chain attack carried out by Chinese state-sponsored hackers via a ...