A threat actor named WhiteCobra has targeting VSCode, Cursor, and Windsurf users by planting 24 malicious extensions in the ...

The researchers are calling the threat actor WhiteCobra.

Cursor is an AI-powered fork of Visual Studio Code, which supports a feature called Workspace Trust to allow developers to safely browse and edit code regardless of where it came from or who wrote it.

A weakness in the Cursor code editor exposes developers to the risk of automatically executing tasks in a malicious repository as soon as it's opened.

By default, malicious repositories run automatically when a folder is opened, putting developer machines and sensitive ...

A Chinese group has been targeting entities involved in US-China relations, economic policy, and international trade in a ...

Calls to shun Microsoft and GitHub go back a long way in the open source community, but moved beyond simmering ...

Koi Security Inc., a startup providing cybersecurity for enterprise endpoints, announced Wednesday it raised $48 million in ...

Every week, ISMG rounds up cybersecurity incidents and breaches around the world. This week, the Vidar infostealer is badder ...

Unleash smarter coding with Visual Studio Code’s latest update featuring AI integration, customizable tools, and workflow ...

Microsoft is signaling a shift in its AI priorities, favoring Anthropic's Claude Sonnet 4 over OpenAI's GPT-5 models in its flagship developer tool, Visual Studio Code.

Aa OpenAI is looking beyond Microsoft for cloud services, Microsoft is quietly updating its AI strategy inside Visual Studio ...