Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.
Security researchers are increasingly citing Visual Studio Code as part of supply chain attacks on developers. Researchers at Jamf recently identified ...
Fake AI coding assistants for VS Code, disguised as ChatGPT extensions, infected over 1.5 million developers with spyware.
A spear-phishing campaign tied to the Democratic People's Republic of Korea (DPRK) uses trusted Microsoft infrastructure to ...
Three vulnerabilities in Anthropic’s MCP Git server allow prompt injection attacks that can read or delete files and, in some ...
Prompt injection for the win Anthropic has fixed three bugs in its official Git MCP server that researchers say can be ...
Update to the latest version and monitor for unexpected .git directories in non-repository folders, developers are told.
RustDesk offers more security and reliability ...