Microsoft's Visual Studio Code (VS Code) code editor and development environment contains a flaw that allows malicious extensions to retrieve authentication tokens stored in Windows, Linux, and macOS ...

Threat actors continue to probe Visual Studio Code's extension ecosystem, and a late November incident shows how quickly a trusted developer tool can be turned into a supply chain beachhead. In a ...

If you’re like most embedded developers, you probably use your silicon vendor's integrated development environment. These IDEs come packed with many features, but they often aren’t customizable to fit ...

A campaign involving 19 Visual Studio (VS) Code extensions that embed malware inside their dependency folders has been uncovered by cybersecurity researchers. Active since February 2025 but identified ...

A group of Israeli researchers explored the security of the Visual Studio Code marketplace and managed to "infect" over 100 organizations by trojanizing a copy of the popular 'Dracula Official theme ...

Developers using the "Insiders" build of the May 2024 Visual Studio Code update, bringing the open-source-based, cross-platform code editor to version 1.90, can now enjoy enhanced chat AI ...