Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

If you find any work missing or have any suggestions (papers, implementations, and other resources), feel free to pull requests. We will add the missing papers to this repo as soon as possible. You ...

Choose from auto-detected languages Edit in a new tab with syntax highlighting Press Ctrl+S to save and sync back Note: Language detection is built into the extension and cannot be customized by users ...

A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.

This week’s cybersecurity recap highlights key attacks, zero-days, and patches to keep you informed and secure.