The popular Notepad alternative was hijacked by bad actors for several months in 2025, but the latest update appears to solve the issue.

Infrastructure delivering updates for Notepad++—a widely used text editor for Windows—was compromised for six months by ...

CISA has expanded its KEV catalog with new SolarWinds, Notepad++, and Apple flaws, including two exploited as zero-days.

Worried about the Notepad++ supply chain attack? Notepad++ 8.9.2 adds "Double-Lock" security to stop malware hijacking.

Notepad++ has been compromised in a sophisticated nation-state cyberattack. Learn about the security breach, the ...

Notepad++ targeted and used to deliver poisoned updates to a select group of victims.

The program is a free text and code editor that's been downloaded millions of times. The compromise began in June and is likely to have involved a Chinese state-sponsored group.

A likely China-sponsored threat actor hijacked Notepad++'s software update mechanism and quietly redirected targeted users of the popular source code editor to malicious downloads for nearly six ...

Last year, the creator of Notepad++ rolled out an update for the text and source code editor after security experts reported ...

Notepad++ update servers were compromised for 6 months in 2025. Learn how the Chrysalis backdoor targeted users and why you must manually update to version 8.9.1 now.

The group targets telecoms, critical infrastructure - all the usual high-value orgs Security researchers have attributed the ...

Users of the text and code editor Notepad++ may have unknowingly downloaded a malicious update for the app after its shared ...