CISA has expanded its KEV catalog with new SolarWinds, Notepad++, and Apple flaws, including two exploited as zero-days.
Last year, the creator of Notepad++ rolled out an update for the text and source code editor after security experts reported ...
State-sponsored threat actors compromised the popular code editor's hosting provider to redirect targeted users to malicious ...
Suspected Chinese state-backed hackers reportedly hijacked Notepad++'s update system for months, targeting select users and ...
The program is a free text and code editor that's been downloaded millions of times. The compromise began in June and is ...
Chinese state-sponsored hackers are suspected of compromising Notepad++ update infrastructure in a hosting-level breach and selectively infecting users with malware.
Notepad++ has been compromised in a sophisticated nation-state cyberattack. Learn about the security breach, the ...
Rapid7 dropped a write-up on the Notepad++ update-chain abuse and - finally - it comes with real IOCs - update.exe downloaded ...
Notepad++ has shared additional details on the supply chain attack carried out by Chinese state-sponsored hackers via a ...
The hosting provider's compromise allowed attackers to deliver malware through tainted software updates for six months.