Security researchers found two AI-branded VS Code extensions with 1.5M installs that covertly send source code and files to China-based servers.

The GitHub Copilot SDK turns the Copilot CLI into a cross-platform agent host with Model Context Protocol support.

Web browsers are among the most essential pieces of software we use daily, yet we often take them for granted. Most users settle for whatever default ships with their devices -- and that's a mistake.

Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

Visual Studio Code 1.109 introduces enhancements for providing agents with more skills and context and managing multiple ...

Microsoft announced that the Copilot Studio extension for the Visual Studio Code (VS Code) integrated development environment is now available to all users. Developers can use it to build and manage ...

Vulnerabilities in the NPM, PNPM, VLT, and Bun package managers could lead to protection bypasses and arbitrary code ...

In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...

The January 2026 release of Visual Studio Code expands AI-assisted development with structured planning agents, parallel ...

Key cyber updates on ransomware, cloud intrusions, phishing, botnets, supply-chain risks, and nation-state threat activity.

Userware today released OpenSilver 3.3, introducing native integration between XAML and Blazor. Developers can now embed Blazor components from libraries like DevExpress, Syncfusion, MudBlazor, Radzen ...