❌

Reading view

Notepad++ vulnerability: State-sponsored hackers hijacked Notepad++ and redirected update traffic for months

For nearly half a year, one of the world’s most widely used text editors quietly sat at the center of a supply-chain attack that few users ever saw coming. Notepad++ has confirmed that a suspected Chinese state-sponsored hacking group compromised […]

The post Notepad++ vulnerability: State-sponsored hackers hijacked Notepad++ and redirected update traffic for months first appeared on Tech Startups.

RapidFort raises $42M Series A to eliminate software supply chain vulnerabilities at machine speed

AI has changed how software gets built, shipped, and attacked β€” all at once. The gap between when a vulnerability is disclosed and when it is exploited is shrinking, and security teams are running out of time to react. That […]

The post RapidFort raises $42M Series A to eliminate software supply chain vulnerabilities at machine speed first appeared on Tech Startups.

WinRAR exploit reportedly remains widely-used by China and Russia state actors despite patch β€” vulnerability allows malicious archives to deliver a hidden payload to Windows Startup folder

Google says that a WinRAR exploit that has been patched six months ago remain a popular attack vector, especially for state-sponsored threat actors. The vulnerability allows malicious archives to install malware on critical Windows folders.

❌