A vulnerability was detected on Notepad + +. Open the hacker box.
A vulnerability was detected on Notepad + +, allowing hackers to install malware via update.
Applications and software, although they facilitate users, often contain bugs and many security vulnerabilities, some very dangerous, as in this news.
According to a report by the website Cyber Security News, a research team from application developer Notepad + + (different from Notepad installed on Windows but started) mentioned the detection of a security vulnerability within the WinGUp update system, a tool for updating built-on applications. Notepad + + applications that allows hackers to change the download channel from the official server of the application to the server of the hacker used to release malware. As a result, after pressing the update, instead of updating the version of the application, it turns out to install malware on the machine instead. Easily, since WinGUp itself, in addition to having a vulnerability open to system interference if it is subject to the appropriate Condition conditions to open such a vulnerability (the source does not provide details of what Condition is expected for security purposes), the application also has a validation vulnerability to confirm whether the update is genuine or not.
The research team said that after the vulnerability was detected, the company updated Notepad + + and WinGUp to strengthen both the Digital Signature Validation and Certificate of the downloaded updates. The update tool will reject the installation immediately if the two elements are invalid. All files associated with the Notepad + + application since version 8.8.7 will be signed with a unique certificate issued only by a highly trusted GlobalSign organization.
Notepad + + has now successfully developed version 8.8.9. This version has several bug fixes, as well as many extensions to the security system of the application. Therefore, for security purposes, the research team asks people who are using this application to update it to version 8.8.9 or higher immediately.
# Welcome 2026 # Take care of yourself # Open budget # Includes IT matters # Trending
