Visual Studio Code 1.109 introduces enhancements for providing agents with more skills and context and managing multiple ...

Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...

A high-severity OpenClaw flaw allows one-click remote code execution via token theft and WebSocket hijacking; patched in ...

A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.