VS Code 1.123 adds a two-hour delay before extensions auto-update to newer versions when automatic updates are enabled.

Microsoft has released VS Code 1.123 with a new Research Agent, AI session syncing, Chronicle search, browser upgrades, and ...

VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.

A security researcher has publicly disclosed a new Visual Studio Code zero-day vulnerability that can reportedly let ...

For more than a year, a self-propagating worm rode VS Code extensions, npm packages, and stolen developer credentials through ...

Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.

Sometime in early 2025, an attacker slipped malicious code into a Visual Studio Code extension, and a GitHub employee installed it. For several days, that extension ran quietly on the developer’s ...

What is Visual Studio Borderless Gaming Integration? Visual Studio Borderless Gaming Integration is a specialized extension set that brings powerful borderless windowed mode management tools directly ...

Careless developers publishing Visual Studio extensions to two open marketplaces have been including access tokens and other secrets that can be exploited by threat actors, a security vendor has found ...

Visual Studio Code (VS Code) has quickly become one of the most popular code editors among developers—and for good reason. It’s fast, lightweight, and highly customizable. But what truly sets it apart ...