Notepad++ Repairs Compromised Update System Delivering Malware

Notepad++ has addressed a security vulnerability exploited by a Chinese threat actor to manipulate its software update mechanism for malware distribution. The latest version, 8.9.2, features a “double lock” design, enhancing the robustness and security of the update process. Maintainer Don Ho emphasizes the importance of verification to render the update process effectively unexploitable. This update aims to protect targets of interest from future attacks.

Want More Context? 🔎