Experts reveal Evelyn Stealer malware abusing VS Code extensions to steal developer credentials, browser data, and ...

ClickFix variant CrashFix relies on a malicious Chrome extension to crash the browser and trick victims into installing the ...

A new Visual Studio Code extension called Nogic sparked a wide-ranging Hacker News discussion, with commenters praising its ...

Microsoft has released the Copilot Studio extension for Visual Studio Code to general availability, enabling teams to build, version, review, and deploy Copilot Studio agents using standard software ...

A malicious extension impersonating an ad blocker forces repeated browser crashes before pushing victims to run ...

A malvertising campaign is using a fake ad-blocking Chrome and Edge extension named NexShield that intentionally crashes the ...

North Korean hackers abuse Visual Studio Code task files in fake job projects to deploy backdoors, spyware, and crypto miners ...

New WhatsApp Web attack spreads self-propagating ZIP files containing Astaroth banking malware through trusted conversations.

Microsoft has released open-source Quantum Development Kit tools for chemistry and error correction, with VS Code integration ...

Solidworks and Inventor receive a lot of attention, and so we tend to forget the surprising number of other MCAD programs ...

Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.

Microsoft has patched 112 vulnerabilities in January 2026, including CVE-2026-20805, a Desktop Window Manager zero-day that attackers are actively exploiting.