The January 2026 update has arrived.

Those project files you deleted might not actually be deleted.

Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

Cybersecurity researchers from Socket’s Threat Research team have identified a developer-compromise supply chain attack ...

A new GlassWorm malware attack through compromised OpenVSX extensions focuses on stealing passwords, crypto-wallet data, and developer credentials and configurations from macOS systems.

The January 2026 update to VS Code (v1.109) transforms the editor into a multi-agent orchestration hub, allowing developers ...

Use AI tools to build apps without coding. This guide covers setup, limits, risks, and SEO tool examples to inspire your own ...

In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...

LinkedIn has rebuilt its static application security testing (SAST) pipeline using GitHub Actions and custom workflows, ...