Search: “VS Code”

219 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 158 Vulnerability 133 Ransomware 73 Data breach 51 Exploit / PoC 47 Threat actor 34 Industry 29 Policy & legal 23 AI safety & security 20 AI tools & infra 19 Phishing & fraud 19 AI research 13 Tools 12 Research 11

SeverityAll critical 219 high 190 medium 127 low 52 info 77

Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks

The Hacker NewsOct 31, 07:59 UTC · Oct 31, 2025Ransomware

60

Researcher Drops a New VS Code Zero-Day After Losing Trust in Microsoft's Disclosure Process

Security AffairsJun 4, 09:13 UTC · Jun 4, 2026Exploit / PoC in the wild1

60

VS Code extensions with 125M+ installs expose users to cyberattacks

Security AffairsFeb 18, 15:14 UTC · Feb 18, 2026Vulnerability CVE-2025-65715 CVE-2025-65716 CVE-2025-657171

60

GitHub Breach Traced to Malicious ‘Nx Console’ VS Code Extension

Infosecurity MagazineMay 21, 14:45 UTC · May 21, 2026Data breach CVE-2026-480271

60

Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto

The Hacker NewsMay 26, 15:12 UTC · May 26, 2025Vulnerability

55

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension

The Hacker NewsMay 28, 05:34 UTC · May 28, 2026Data breach in the wildCVE-2026-45321 CVE-2026-48027

60

GitHub says internal repositories were impacted in poisoned VS Code extension attack

CyberScoopMay 20, 16:59 UTC · May 20, 2026Ransomware

60

TeamPCP breached GitHub's internal codebase via poisoned VS Code extension

Help Net SecurityMay 20, 00:00 UTC · May 20, 2026Data breach

60

Flaws in Popular IDE Extensions Allow Data Exfiltration

Infosecurity MagazineFeb 19, 10:45 UTC · Feb 19, 2026Vulnerability CVE-2025-65717 CVE-2025-65716 CVE-2025-65715

60

Critical Flaws Found in Four VS Code Extensions with Over 125 Million Installs

The Hacker NewsFeb 18, 13:16 UTC · Feb 18, 2026Vulnerability CVE-2025-65717 CVE-2025-65716 CVE-2025-657151

60

Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code

The Hacker NewsJan 26, 16:53 UTC · Jan 26, 2026Exploit / PoC CVE-2025-69264 CVE-2025-69263

60

Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploited

Help Net SecurityMay 24, 00:00 UTC · May 24, 2026Data breach in the wildCVE-2026-42945 CVE-2026-45585 CVE-2026-41091+1 CVEs

60

⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More

The Hacker NewsNov 3, 17:59 UTC · Nov 3, 2025Threat actor CVE-2025-61932 CVE-2025-55315 CVE-2025-10680+18 CVEs1

60

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware

The Hacker NewsDec 10, 07:33 UTC · Dec 10, 2025Malware CVE-2025-55182

60

Researcher publishes GitHub token-stealing exploit, blames Microsoft’s disclosure process

The RecordJun 4, 13:40 UTC · Jun 4, 2026Data breach1

60

⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More

The Hacker NewsJan 26, 16:53 UTC · Jan 26, 2026Malware CVE-2025-59718 CVE-2025-59719 CVE-2026-24061

60

ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More Stories

The Hacker NewsDec 4, 16:05 UTC · Dec 4, 2025Phishing & fraud

55

GitHub Confirms Breach of Internal Repositories

Infosecurity MagazineMay 20, 10:45 UTC · May 20, 2026Ransomware

60

GlassWorm malware has resurfaced on the Open VSX registry

Security AffairsNov 10, 20:06 UTC · Nov 10, 2025Malware

55

⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New Threats

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2026Exploit / PoC in the wildCVE-2026-21509 CVE-2026-1281 CVE-2026-1340

60

China-linked APT group MirrorFace targets Japan

Security AffairsJan 10, 08:24 UTC · Jan 10, 2025Threat actor CVE-2023-28461 CVE-2023-27997 CVE-2023-3519

60

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

The Hacker NewsMay 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333 CVE-2026-41091 CVE-2026-45498+31 CVEs

60

Taking over millions of developers exploiting an Open VSX Registry flaw

Security AffairsJun 27, 19:37 UTC · Jun 27, 2025Vulnerability

55

⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI

The Hacker NewsJun 2, 03:39 UTC · Jun 2, 2026Ransomware in the wildCVE-2026-0257 CVE-2026-8732 CVE-2026-27771+31 CVEs

60

All gas, no brakes: Time to come to AI church

Cisco TalosFeb 5, 19:00 UTC · Feb 5, 2026Ransomware in the wild

60

⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Exploit / PoC CVE-2024-53104 CVE-2024-53197 CVE-2024-50302+25 CVEs

60

Week in review: Trojanized KeePass allows ransomware attacks, cyber risks of AI hallucinations

Help Net SecurityMay 25, 00:00 UTC · May 25, 2025Ransomware CVE-2025-4322

60

⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero

The Hacker NewsOct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-21043

60

⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-20309+23 CVEs

60

SAP-Related npm Packages Compromised in Credential

The Hacker NewsApr 30, 16:39 UTC · Apr 30, 2026Data breach

60

⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply

The Hacker NewsAug 10, 15:03 UTC · Aug 10, 2026Ransomware in the wildCVE-2026-34348 CVE-2026-18497 CVE-2026-63508+43 CVEs1

60

ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device

The Hacker NewsJun 18, 15:29 UTC · Jun 18, 2026Exploit / PoC CVE-2026-20127

60

Product Walkthrough: How Mesh CSMA Reveals and Breaks Attack Paths to Crown Jewels

The Hacker NewsMar 18, 14:49 UTC · Mar 18, 2026Vulnerability

55

Researchers Reveal Reprompt Attack Allowing Single-Click Data Exfiltration From Microsoft Copilot

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2026Ransomware1

60

Patch Tuesday, February 2026 Edition

Krebs on SecurityFeb 11, 03:47 UTC · Feb 11, 2026Vulnerability CVE-2026-21510 CVE-2026-21513 CVE-2026-21514+7 CVEs1

60

Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilience

Help Net SecurityFeb 15, 00:00 UTC · Feb 15, 2026Vulnerability in the wildCVE-2026-1731 CVE-2024-12356 CVE-2026-1281+2 CVEs

60

Google Makes CodeMender Available as Managed AI Security Agent

Infosecurity MagazineJul 22, 10:30 UTC · Jul 22, 2026Exploit / PoC

60

GitHub confirms being hacked by TeamPCP, says customer data unaffected

The RecordJun 18, 00:00 UTC · Jun 18, 2026Ransomware

60

Desktop and IoT malware report for Q3 2025

Kaspersky SecurelistNov 19, 10:00 UTC · Nov 19, 2025Malware CVE-2024-40766

60

Microsoft patches two zero-days exploited in the wild (CVE-2024-43573, CVE-2024-43572)

Help Net SecurityOct 8, 00:00 UTC · Oct 8, 2024Exploit / PoC in the wildCVE-2024-43573 CVE-2024-43572 CVE-2024-38112+3 CVEs

60