Critical vulnerabilities in four widely used VS Code extensions could enable file theft and remote code execution across 125M ...

The latest monthly update to Visual Studio Code, version 1.107 (the November 2025 release), continues Microsoft's focus on AI-assisted workflows with expanded multi-agent orchestration across local, ...

Vulnerabilities with high to critical severity ratings affecting popular Visual Studio Code (VSCode) extensions collectively downloaded more than 128 million times could be exploited to steal local ...

Microsoft detailed how 2025 became the year coding agents took over Visual Studio Code, leading to a unified agent experience that centralizes all AI-driven assistants inside the editor. In a Nov. 5 ...

Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.

With Visual Studio Code 1.107, developers can use GitHub Copilot and custom agents together and delegate work across local, background, and cloud agents. Just-released Visual Studio Code 1.107, the ...

A campaign involving 19 Visual Studio (VS) Code extensions that embed malware inside their dependency folders has been uncovered by cybersecurity researchers. Active since February 2025 but identified ...

The January 2026 update has arrived.