There are definitely lessons to be learned here.
Notepad++ users take note: It's time to check if you're hacked
#NotepadPlusPlus #Hack #SupplyChain #Vulnerability #Security #Tech
There are definitely lessons to be learned here.
Notepad++ users take note: It's time to check if you're hacked
#NotepadPlusPlus #Hack #SupplyChain #Vulnerability #Security #Tech
Notepad++ versions and update mechanisms had been compromised since June until December 2025. Please update to 8.9.1 wherever you have this tool. It's unclear what malicious versions of the tool might do. I Recommend activating incident response for affected hosts.
https://notepad-plus-plus.org/news/hijacked-incident-info-update/
#CTI #Infosec #NotepadPlusPlus #Npp Here's a list of all the legitimate hashes for Notepad plus plus since April 2025.
Threat hunters, get a list of all the hashes of NPP in your environment, look for any that don't correspond to this list.
Hashes for 8.8.4 aren't available at this time, but if someone can provide them, I'll update the link.
@GossiTheDog https://gist.github.com/iaintshootinmis/4ad89830caf6be34c1f29bd6b9bbc5e6