Latest VS Code update introduces prepackaged bundles of chat customizations that can include skills, commands, agents, MCP ...

Visual Studio Code 1.110 (February 2026) adds new agent extensibility, browser-driving chat tools, and expanded chat accessibility.

North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT ...

Cline CLI 2.3.0 was published with a stolen npm token, installing OpenClaw in an 8-hour attack affecting ~4,000 downloads.

It's more than just a code editor.

Attackers used “technical assessment” projects with repeatable naming conventions to blend in cloning and build workflows, ...

Building your perfect programming environment is easier than you think. Here's how to do it in minutes!

Attackers are running paid Facebook ads that look like official Microsoft promotions, then directing users to near-perfect clones of the Windows 11 download page. Click Download Now and instead of a ...

Microsoft has warned that threat actors are exploiting seemingly legitimate Next. js repositories to compromise software developers, embedding staged backdoors inside projects that mimic technical ...

In a social media feedback thread started by Microsoft Visual Studio guru Mads Kristensen, multiple developers unloaded on the IDE's facility with AI provided by GitHub Copilot and other tools.

Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.