Notepad++ update mechanism has been hacked in a way that under certain conditions hackers can replace the update system of the app and redirect users traffic to make people install custom version and any additional apps with it.

If you have NP++ on your machine and you have updated it since June 2025: backup data, remove NP++, check any oddities, and install the new safe NP++. Do not update your app via the app itself, since it can be compromised.

It seems that the whole thing was not random and was not targeting casual users, but high-end companies and state-related facilities. But anyway, you know.

#Hackers@GameDEV
#Security@GameDEV

During the last few weeks I've got several "job offers" where "you can earn up to €650 a day remotely". But the workflow is slightly new:

They pretend to be an alternative App Store, which is a legit business. But you as a tester suppose to install tons of random apps on your phone every day. At first they will drop you random game APKs, then viruses to steal your data and money.

I'm pretty sure a lot of people will fall for it. The process looks chill and "reasonable" for a tester to install apps.

#Security@GameDEV
#Scam@GameDEV

Be careful, a relatively new scam: dozens if not hundreds of medium-size repos were infected by fake CVE warning, telling that Visual Studio Code is affected. These updates are often seen in the feed and via email notifications.

So you have to urgently download the fix (which is obviously a malware). They push to fear and urgency so a lot of people fell for it.

#Security@GameDEV

Apparently, CPU-Z has been hacked for at least a day and the script was randomly sending users to get a legit app + a hacked DLL.

The same already happened to Notepad++ (but on a way longer scale, they hijacked the update server). A lot of other companies were affected over the years (MSI Afterburner, FileZilla, even fake Blender installers were common a few years ago). But usually they at least make a fake website.

#Security@GameDEV
#Hackers@GameDEV

LOL

#Security@GameDEV
#meme@GameDEV

Holy crap, I missed this drama completely and apparently all the software to control fan speeds is using a system hack that (if active) sets your whole PC at risk...

WinRing0 is a driver that all monitoring apps and fan tuning apps were using to get deep access to sensors.

The problem? You definitely need this driver to run such apps for handhelds and laptops. On some models without this access the fans will spin at 100% all the time.

https://www.youtube.com/watch?v=H_O5JtBqODA
#Security@GameDEV
#WTF@GameDEV
#Windows@GameDEV

Holy cow (via)

A quick summary: the attacker has to be a local Linux user on your system and then he can escalate the privileges with a very simple script.

#Linux@GameDEV
#Security@GameDEV

Will the social media manager be fired or what?

#Security@GameDEV

Do not install suspicious free games on Steam. It's the 20th time the game was packed with malware!

This one was called Beyond the Dark and the issue has been discovered by Eric Parker.

It was using a fake Unity DLL that booted a custom virus, depends on the system (which browser the user had, which antivirus, etc).

#Security@GameDEV
#Steam@GameDEV

😏 The chat brought it here

#GitHub@GameDEV
#meme@GameDEV
#Security@GameDEV

Well, yeah...

#Security@GameDEV
#meme@GameDEV

Honestly, using Wallpaper Engine always seemed like a dumb idea. But yeah, now it's slightly worse!

#Hackers@GameDEV
#Security@GameDEV

How curious

https://github.com/SmtimesIWndr/gdid-reversal

#Microsoft@GameDEV
#Windows@GameDEV
#Security@GameDEV

Seemingly Valve lost about 13TB of data which can lead to security issues and maybe unannounced games to become public.

The archive is still under investigation and take this story with a grain of salt. UPD: multiple bigger sources confirmed the leak.

#Valve@GameDEV
#Security@GameDEV
#WTF@GameDEV

Some hacker took control over backend server of Hello Neighbor spin-off (Secret Neighbor), removed cloud saves of all users and insists that the game has to be taken down completely.

#Security@GameDEV
#Steam@GameDEV
#WTF@GameDEV

There are so extreme PHP vulnerabilities discovered yesterday that government websites and corporations take their infrastructure offline. If you have a website, check and upgrade.

CVE-2026-109618 & CVE-2026-109619 (known as "php2shell") are reported Remote Code Execution vulnerabilities in PHP that could let attackers run their own code on affected servers.

Both vulnerabilities reportedly affects every PHP version from PHP 5 onward.

PHP has now published fixes, and they should be applied as soon as possible.

Update to PHP 8.5.12, 8.4.27, 8.3.36, or 8.2.35 mediate this vulnerability. Patches have not been made available for PHP 5 or 7.

#Security@GameDEV

What is Capcom ID by the way?

#Capcom@GameDEV
#Security@GameDEV

The same day PHP got hacked, VMmanager 6 (the biggest Russian virtualization software) has been compromised. It's used on hosting providers for thousands of business and government entities. The level of data loss is extremely severe and some services are still down.

What happened: a new security flaw allowed hackers to extract anything from servers, controlled by the software. They moved into data extraction, mounting drivers one by one as if they have access to all drivers from a single valid connection. And were noticed initially due to unusually high load. Was it a single group or many and what was lost remains unclear.

#Security@GameDEV

The creators of Kingdom Come (who's directors are known for odd shitposting) were just hit by a serious cyber attack. According to early estimations, someone had access to basically everything. Warhorse Studios is still investigating and will report more details later.

#Security@GameDEV