A suspicious Visual Studio Code extension with file-encrypting and data-stealing behavior successfully bypassed marketplace ...

Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities ...

A published VS Code extension didn't hide the fact that it encrypts and exfiltrates data and also failed to remove obvious signs it was AI-generated.

GitHub launches a new AI-powered application modernization capability designed to simplify and accelerate upgrades and ...

A malicious extension was published on Microsoft ’s official VS Code marketplace, and was able to remain there for some time ...

Microsoft's unified agent experience in VS Code consolidates Copilot, Codex, and custom agents, introducing Agent Sessions, a ...

The Open VSX registry rotated access tokens after they were accidentally leaked by developers in public repositories and allowed threat actors to publish malicious extensions in an attempted ...

Researchers uncover SleepyDuck RAT hidden in VSX extension, using Ethereum contracts to control infected hosts.

To enhance reliability, Snowflake’s AI researchers introduced a new evaluation framework called Agent Goal, Plan, Action that ...

Stability AI wins in court, Google Maps gets chatty, AI drives up power use, and Coca-Cola rolls out a new wave of generative ...

Prowler's launch marks a new era in cloud security, becoming the first open platform to embed AI directly into security workflows SAN FRANCISCO, Nov. 6, ...

The leak has now been fixed. According to the Open VSX team, the incident has been fully contained and closed since October ...