Infrastructure delivering updates for Notepad++—a widely used text editor for Windows—was compromised for six months by ...

The hosting provider's compromise allowed attackers to deliver malware through tainted software updates for six months.

Rapid7 dropped a write-up on the Notepad++ update-chain abuse and - finally - it comes with real IOCs - update.exe downloaded ...

In an alarming revelation, the popular text editor Notepad++ has confirmed that its update service was compromised in a targeted attack linked to state-sponsored cybercriminals. This incident sheds ...

Notepad++ released version 8.8.9 in December, which checks digital signatures and certificates before installing any updates.

State-sponsored threat actors compromised the popular code editor's hosting provider to redirect targeted users to malicious ...