The hosting provider's compromise allowed attackers to deliver malware through tainted software updates for six months.

Rapid7 links China-linked Lotus Blossom to a 2025 Notepad++ hosting breach that delivered the Chrysalis backdoor via hijacked ...

The group targets telecoms, critical infrastructure - all the usual high-value orgs Security researchers have attributed the ...

A Chinese-linked cyberespionage group targeted Notepad++'s update process to deploy malware. The attack from June to December 2025 selectively affected users, prompting investigations. Hosting ...

Feb 2 (Reuters) - A Chinese-linked cyberespionage group with ‌a ​long history hijacked the update ‌process for the popular code editing platform Notepad++ to deliver a custom ​backdoor and other ...

A Chinese-linked cyberespionage group named Lotus Blossom hijacked the update process of Notepad++ to target specific users. Gaining access in June 2025, they maintained control until December that ...

Notepad++'s updater usually pops up, but users can also prompt it by selecting the "?" dropdown in the taskbar. Christopher ...

Notepad++ has shared additional details on the supply chain attack carried out by Chinese state-sponsored hackers via a ...

Canada Computers warns customers their personal information, including credit card numbers, may have been stolen in a data ...