Critical vulnerabilities in four widely used VS Code extensions could enable file theft and remote code execution across 125M installs.
Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.
Four serious new vulnerabilities affect Microsoft Visual Studio Code, Cursor and Windsurf extensions, three of which remain ...
The latest monthly update to Visual Studio Code, version 1.107 (the November 2025 release), continues Microsoft's focus on AI-assisted workflows with expanded multi-agent orchestration across local, ...
VS Code 1.108 adds experimental Agent Skills support, enabling Copilot to load workspace-defined skills on demand. Chat sessions are now organized around agent sessions, with a revamped session picker ...
A campaign involving 19 Visual Studio (VS) Code extensions that embed malware inside their dependency folders has been uncovered by cybersecurity researchers. Active since February 2025 but identified ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results