VS Code 1.117 adds bring-your-own model key support for Copilot Business and Enterprise users and introduces a set of chat, agent, terminal, and TypeScript updates.

VS Code extensions since Dec 21, 2025 fuel GlassWorm v2, installing cross-IDE malware and stealing credentials.

Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...

Business and enterprise users can now connect their own API keys to use LLMs via OpenRouter, Ollama, Google, OpenAI, and more ...

GitHub Copilot is moving to usage-based billing on June 1, 2026, prompting user concerns about predictability, model access, monthly credit limits and whether unchanged plan prices will translate into ...

A compromised developer's repository serves as a worm-like infection vector to spread remote access Trojans (RATs) and other ...

VS Code is no longer just an IDE.

IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...

A malicious version of the Bitwarden command-line interface (CLI) password manager was briefly distributed via the Node ...

A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious ...

Learn how Claude AI tools like Claude Design and Hyperframes are automating motion graphics, subtitles, and video editing ...

Advanced certification tracks prioritize object-oriented programming, efficient data handling, and integration with development tools. Proficiency in using generator functions, managing dependencies ...