Infrastructure delivering updates for Notepad++—a widely used text editor for Windows—was compromised for six months by ...

A Chinese-linked cyberespionage group named Lotus Blossom hijacked the update process of Notepad++ to target specific users. Gaining access in June 2025, they maintained control until December that ...

The popular Notepad alternative was hijacked by bad actors for several months in 2025, but the latest update appears to solve the issue.

The program is a free text and code editor that's been downloaded millions of times. The compromise began in June and is ...