Notepad++ has addressed a security vulnerability exploited by a Chinese threat actor to manipulate its software update mechanism for malware distribution. The latest version, 8.9.2, features a “double lock” design, enhancing the robustness and security of the update process. Maintainer Don Ho emphasizes the importance of verification to render the update process effectively unexploitable. This update aims to protect targets of interest from future attacks.
