Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.
Versions installed via Snap don't delete files when users empty system trash Linux users who installed Microsoft's Visual ...
A set of attack vectors in GitHub Codespaces have been uncovered that enable remote code execution (RCE) by opening a ...
In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...
Cybersecurity researchers from Socket’s Threat Research team have identified a developer-compromise supply chain attack ...
Visual Studio Code 1.109 introduces enhancements for providing agents with more skills and context and managing multiple ...
Those project files you deleted might not actually be deleted.
The January 2026 update has arrived.
The January 2026 update to VS Code (v1.109) transforms the editor into a multi-agent orchestration hub, allowing developers ...
Oh, sure, I can “code.” That is, I can flail my way through a block of (relatively simple) pseudocode and follow the flow. I ...
Two malicious VS Code extensions have exfiltrated code snippets, API keys, and proprietary algorithms from 1.5 million ...