Notepad++ Vulnerability Let Attackers Hijack Network Traffic to Install Malware via Updates

Security researchers observed suspicious WinGUp update traffic for Notepad++, where update requests in some cases were redirected to malicious servers and compromised installers were delivered; an integrity/validation flaw in the updater could allow attackers to substitute legitimate installers with rogue binaries. Notepad++ has hardened update verification and begun digitally signing binaries (GlobalSign) in recent releases (8.8.7+), and users are advised to upgrade to 8.8.9 and obtain installers only from the official site.