Notepad++ secures update channel in wake of supply chain compromise Notepad++, the popular text and source code editor for Windows whose update mechanism was hijacked last year, has been updated to prevent similar attacks in the future. Security hardening of Notepad++ The hijacking of the update mechanism was confirmed earlier this month by Notepad++ maintainer Don Ho. The attackers were able to intercept communications between the updater client and the Notepad++ update servers, allowing them to deliver and run a malicious update in place of a legitimate one. The attack took advantage of several weaknesses: Before Notepad++ v8.8.8 (released on November 18, 2025), the XML file containing the download URL for the update was not signed, which allowed attackers to make the software’s…