State-sponsored hackers' are being blamed for compromising the popular alternative to Windows Notepad over a period of six months last year.
Some Notepad++ users were redirected to malicious servers last year. Now, its developer says they were targeted by Chinese ...
The hosting provider's compromise allowed attackers to deliver malware through tainted software updates for six months.
Rapid7 links China-linked Lotus Blossom to a 2025 Notepad++ hosting breach that delivered the Chrysalis backdoor via hijacked updates, fixed in v8.8.9 ...
The developer did not specify when they became aware of the attack, but said that “all attacker access was definitively terminated” by December 2nd. The Notepad++ updater has been updated itself with ...
State-sponsored threat actors compromised the popular code editor's hosting provider to redirect targeted users to malicious ...
A Chinese-linked cyberespionage group with a long history hijacked the update process for the popular code editing platform Notepad++ to deliver a ​custom backdoor and other malware to targeted users, ...
Notepad++ is a favorite of programmers and other power users, but its auto-update function was compromised for months in 2025 ...
Attackers had specifically delivered malware to systems using the Notepad++ updater. Investigations point to state actors.
State-backed attackers hijacked Notepad++ update traffic via a hosting provider breach, redirecting users to malicious downloads since June 2025.
Canada Computers warns customers their personal information, including credit card numbers, may have been stolen in a data ...
The federal government watchdog outlined how some districts use these tools to fit the individualized needs of students with disabilities.