Notepad++ releases emergency patch as hackers exploit updater to deploy malware

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Notepad++ Update Mechanism Vulnerability Allows Malware Deployment A critical vulnerability in Notepad++'s update mechanism, WinGUp, has been identified, allowing attackers to hijack network traffic and install malware disguised as legitimate updates. The development team has released version 8.8.9 to address this issue, which has been actively exploited in the wild. Users of Notepad++ are urged to update their software to mitigate potential risks. 3 sources 43