Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

Patch meant to close a severe expression bug fails to stop attackers with workflow access Multiple newly disclosed bugs in the popular workflow automation tool n8n could allow attackers to hijack ...

In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...

A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.

Using Final Cut Pro, Logic Pro and Pixelmator Pro — part of the Creator Studio — we were able to make an admittedly cheesy video.

The January 2026 update to VS Code (v1.109) transforms the editor into a multi-agent orchestration hub, allowing developers to automate complex, rule-based editorial workflows with proactive context ...

The classic VS Code is great and all, but these specialized forks are better for certain programming tasks ...