Open-source text program Notepad++ impacted by critical vulnerability
Open-source text program Notepad++ impacted by critical vulnerability
Publish Date: 2026-02-05 16:07:00
Source Domain: www.aha.org
Using an unordered list, summarize the following article with between 4 and 8 key points. The National Institute of Standards and Technology Feb. 2 published details on a critical vulnerability that impacted Notepad++, a free, open-source text and source code program widely used by several industries, including health care. The vulnerability impacted an update component affecting iterations of the program prior to version 8.8.9, and allowed attackers to gaining access to and disrupting the update process. According to the program’s developer, attacks that occurred from June to November 2025 were likely executed by a sophisticated nation-state threat actor. For more information on this or other cyber and risk issues, contact Scott Gee, AHA deputy national advisor for cybersecurity and risk, at [email protected]. For the latest cyber and risk resources and threat intelligence, visit aha.org/cybersecurity.
