Open VSX extensions exposed developer supply-chain risks. Learn how to audit VS Code extensions and reduce credential exposure.

New York, USA, August 13th, 2026, FinanceWireDeveloper tools have become a growing part of the enterprise attack surface, ...

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

Enterprise AI security report from Akamai documents vibe hacking, CursorJacking, and CometJacking -- new attack classes ...

Agent Plugins 1.0 defines a write-once-run-anywhere container for passing tools and skills across different agent platforms ...

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the ...

There’s no shortage of AI extensions for VS Code, whether you need something like Claude Code, Copilot, or Supermaven. I use many of these extensions every day, and there’s no doubt they’re helpful, ...

Discover the best open-source vulnerability scanners of 2026 that help CIOs minimize security costs while ensuring robust protection against software vulnerabilities. Learn about their features and ...

LLM-native IDE security risks centre on system controls, according to a study of developer reports. Researchers from York ...

Mojo programming language reaches 1.0 stable release after three years of API churn, ending breaking changes for production developers. An Oak Ridge National Laboratory study found Mojo GPU kernels ...

Any data that enters your system from outside a trust boundary should be treated as untrusted until proven otherwise. That includes form fields, API payloads, file uploads, headers, cookies, queue ...