Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

GlassWorm malware is expanding to open source platforms, targeting macOS users with infostealers.

Versions installed via Snap don't delete files when users empty system trash Linux users who installed Microsoft's Visual ...

Spark, a lightweight real-time coding model powered by Cerebras hardware and optimized for ultra-low latency performance.

Hands-on learning is praised as the best way to understand AI internals. The conversation aims to be technical without ...

Moonshot's new AI model, Kimi K2.5, enables users to generate web interfaces from visual inputs. This breakthrough could redefine the landscape of intuitive coding tools.

Security researchers are warning of insecure deployments in enterprise environments of the Moltbot (formerly Clawdbot) AI assistant, which can lead to leaking API keys, OAuth tokens, conversation ...

Move over, Claude: Moonshot's new AI model lets you vibe-code from a single video upload ...

In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...

Two VSCode extensions are harvesting sensitive data and sending it to China.

The January 2026 update to VS Code (v1.109) transforms the editor into a multi-agent orchestration hub, allowing developers ...

Two malicious VS Code extensions have exfiltrated code snippets, API keys, and proprietary algorithms from 1.5 million ...