GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...
The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, repositories, and extensions on GitHub, npm, and VSCode/OpenVSX extensions. Evidence ...
Preview of new companion app allows developers to run multiple agent sessions in parallel across multiple repos and iterate ...
Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for ...
A simple prompt sent Claude Code on a mission that uncovered major security vulnerabilities in popular text editors — and ...
Infosecurity outlines key recommendations for CISOs and security teams to implement safeguards for AI-assisted coding ...
A smaller weekly VS Code release adds chat workflow refinements, semantic search changes, TypeScript 6.0, and new admin controls.