A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious ...
VS Code is no longer just an IDE.
IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...
Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...
The primary Android development environment remains Android Studio, which has built-in support for AI agents, but the new CLI ...
Catch up with this week's Microsoft stories in the latest recap. Patch Tuesday updates, bugs, Start menu reworks, Recall ...
Nearly every major product family needs immediate patching, from Windows to Office to Microsoft Edge, SQL Server, and even ...
Two and a half years after Light Year (Guangnian Zhiwai) was folded into Meituan, the team now known as GN06 is still working ...
Visual Studio 2026 18.5 arrives with two headline changes – a smarter code suggestion system and an AI-powered debugger. Yet ...
Critical154Important1Moderate0LowMicrosoft addresses 163 CVEs in the April 2026 Patch Tuesday release, including two zero-day ...
Anthropic PBC is making it easier to automate tasks using Claude Code without relying on autonomous artificial intelligence ...
GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...