The vulnerability comes from the way Notepad handles Markdown hyperlinks. Attackers craft malicious .md files with embedded ...
State-sponsored hackers' are being blamed for compromising the popular alternative to Windows Notepad over a period of six months last year.
Vibe-coding tools - which let people without coding skills create apps using AI - are exploding in popularity.
Notepad++, one of Windows' most widely used text editors, has confirmed a major security breach after its update ...
Smug faces across all those who opposed the WordPad-ification of Microsoft's humble text editor Just months after Microsoft added Markdown support to Notepad, researchers have found the feature can be ...
Notepad++ has shared additional details on the supply chain attack carried out by Chinese state-sponsored hackers via a ...
The developer of the popular text editor Notepad++ said hackers associated with the Chinese government hijacked its software ...
State-backed attackers hijacked Notepad++ update traffic via a hosting provider breach, redirecting users to malicious downloads since June 2025.
The flaw exploits Notepad’s recently added support for Markdown, a formatting language used on websites and in files, to run malicious code on a Windows PC.
Rapid7 links China-linked Lotus Blossom to a 2025 Notepad++ hosting breach that delivered the Chrysalis backdoor via hijacked updates, fixed in v8.8.9 ...
Notepad++ is a favorite of programmers and other power users, but its auto-update function was compromised for months in 2025 ...
The program is a free text and code editor that's been downloaded millions of times. The compromise began in June and is ...