Notepad++ update service hijacked in targeted state-linked attack

Breach lingered for months before stronger signature checks shut the door

A state-sponsored cyber criminal compromised Notepad++’s update service in 2025, according to the project’s author.…