Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

In a a robust Hacker News thread sparked by Jamf Threat Labs research, a VS Code team member defended the editor's Workspace ...

A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.

February 3, 2026: We've added new Fruits vs Brainrots codes. With the recent trend of developers reimagining and remixing Plants vs Zombies over on Roblox, it was inevitable that Fortnite's community ...

Patch meant to close a severe expression bug fails to stop attackers with workflow access Multiple newly disclosed bugs in the popular workflow automation tool n8n could allow attackers to hijack ...

This week’s cybersecurity recap highlights key attacks, zero-days, and patches to keep you informed and secure.