Infosecurity Magazine

GitHub Confirms Breach of Internal Repositories Via Malicious VS Code Extension

The Microsoft-owed software developer platform, GitHub, has confirmed a third-party has gained unauthorized access to 3800 ...
Bleeping Computer

Microsoft apologizes for removing VSCode extensions used by millions

Microsoft has reinstated the 'Material Theme – Free' and 'Material Theme Icons – Free' extensions on the Visual Studio Marketplace after finding that the obfuscated code they contained wasn't actually ...
Cybernews

GitHub confirms breach after hackers put stolen source code up for sale

GitHub has confirmed that hackers breached internal repositories through a poisoned VS Code extension after stolen source ...
The Information

How Microsoft, Meta, xAI Get AI Training Data From Their Employees

Microsoft’s GitHub Copilot may have lost much of its early lead in the AI coding race to rivals like Anthropic and Cursor, ...
Bleeping Computer

Malicious VSCode extensions on Microsoft's registry drop infostealers

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing malware that can take screenshots, steal credentials, crypto wallets, and ...
Hosted on MSN

Microsoft reverses Copilot auto-attribution in VS Code after backlash

Microsoft has rolled back a Visual Studio Code update that automatically added 'Co-authored-by: Copilot' to Git commits, even when the AI tool was not used. The reversal, in version 1.119, follows ...
Hosted on MSN

Microsoft reverses Copilot credit in VS Code after backlash

Microsoft has rolled back a controversial VS Code feature that automatically attributed GitHub commits to its Copilot AI, even when unused. The reversal in version 1.119 follows developer backlash ...