Rapid7 links China-linked Lotus Blossom to a 2025 Notepad++ hosting breach that delivered the Chrysalis backdoor via hijacked updates, fixed in v8.8.9 ...
Chinese state-sponsored threat actors were likely behind the hijacking of Notepad++ update traffic last year that lasted for almost half a year, the developer states in an official announcement today.
The hosting provider's compromise allowed attackers to deliver malware through tainted software updates for six months.
The Strategy and Execution concentration is for those who want to drive growth and revenue in today's chaotic marketplace. You'll learn how to create an environment of ongoing innovation, craft ...
Notepad++ update servers were compromised for 6 months in 2025. Learn how the Chrysalis backdoor targeted users and why you must manually update to version 8.9.1 now.