Topic
Every article tagged VS Code, newest first.
New cybersecurity research uncovers how AI coding assistants like Cursor and GitHub Copilot and CI/CD agents are being exploited for data theft and remote code execution. Learn the details behind ‘IDEsaster’ and ‘PromptPwnd,’ plus essential steps to secure your development environment.
A massive supply chain risk lurks in the VS Code Marketplace. Learn how attackers use typosquatting to impersonate popular extensions and install malware directly into your IDE.
Looking for something specific?
Search every article by topic, tool or CVE.
Keep reading
GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.