#4
The Hacker News
general
February 18, 2026 at 10:40 UTC
Notepad++ Fixes Hijacked Update Mechanism Used to Deliver Targeted Malware
By [email protected] (The Hacker News)
AI Summary
Notepad++ version 8.9.2 implements a 'double lock' design to secure its update mechanism after Chinese threat actors hijacked the software's update process to deliver targeted malware. Maintainer Don Ho describes the new system as 'robust and effectively unexploitable' with enhanced verification processes. This supply chain attack demonstrates how attackers target trusted software update channels to distribute malware selectively to high-value targets.
Relevance score: 94.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →