Inside Chrysalis: Lessons from the Notepad++ Backdoor and the New Reality of Supply Chain Attacks - Seguridad Mania.com - España y América Latina

The recent discovery of the Chrysalis backdoor - delivered through a compromise of Notepad++ update infrastructure - offers a clear look at how modern nation-state attackers are evolving their supply chain tradecraft. In this session, Rapid7 Senior Director of Threat Analytics Christiaan Beek and Steve Edwards, Director of Threat Intelligence & Detection Engineering (TIDE), break down what really happened in the Chrysalis campaign, why it matters beyond Notepad++, and what defenders should do next. Understand how the attackers were able to maintain access for months without triggering widespread detection by selectively delivering a custom backdoor linked to the Lotus Blossom APT. Attendees will walk away with a practical understanding of this attack, concrete steps to assess exposure, and guidance on how to strengthen detection and response strategies against increasingly patient, selective supply chain threats.