VS Code 1.26 prevents automatic code execution for new project folders, lets users configure whether code can be executed ...

CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...

Visual Studio Code 1.128 is out now. It's the latest weekly release and this time brings a handful of new features.

GitHub Copilot VS Code browser tools are now generally available and enabled by default for all paid Copilot subscribers. The ...

Visual Studio Code 1.126 adds session-level Copilot cost information, continuing Microsoft's recent focus on helping developers monitor and manage usage-based GitHub Copilot billing.

The July 8, 2026, Visual Studio Code update expands agent workflows, chat attachments, browser-tab controls, OS-level shortcuts and enterprise telemetry management.

The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.

Adversaries could plant a malicious repository that executes arbitrary code and steals cloud credentials, showcasing MCP risk.

My old editor learned new tricks ...

VS Code’s secret weapons ...

TypeScript 7.0 became stable on July 8, 2026 — and for most of the tens of millions of professional web developers who depend on it daily, a single npm install -D typescript command now cuts build ...

GitGuardian is now live on the Kiro Powers marketplace. Install the Power once, and Kiro's agent scans for exposed secrets ...