CISA issued an alert on ongoing supply chain attacks abusing GitHub repos via a malicious Nx Console VSCode extension and the Megalodon campaign Threat actors stole CI/CD secrets, cloud credentials, ...

Token-based billing for GitHub Copilot went live today, and 4.7 million paid subscribers woke up to a fundamentally different product than the one they paid for yesterday. The new GitHub AI Credits ...

Multi-chat Claude sessions allow VS Code users to run multiple related conversation threads in one Claude agent session ...

Beyond Copilot usage visibility, the June update delivers several other enhancements centered on AI-assisted development, security and quality-of-life improvements. Here's a quick rundown of the ...

Visual Studio Code 1.129 adds a dedicated process for running AI agent sessions and an experimental docked editor for reviewing agent-generated changes.

Visual Studio Code 1.128 is out now. It's the latest weekly release and this time brings a handful of new features.

Canva today unveiled Canva Code 2.0, an AI-powered vibe coding platform that lets users build and visually edit websites, ...

Quick Summary Want to protect enterprise applications, reduce security risks, and embed security into every stage of software development? Explore the 10 best application security tools for ...

June 2026 update to Visual Studio tracks Copilot usage based on token consumption rather than by request, aligning with ...

Researchers at Wiz have disclosed a high-severity vulnerability in the Amazon Q Developer extension for Visual Studio Code that could allow attackers to steal developers’ cloud credentials by luring ...

Following the reports last week using the Windows Global Device ID (GDID) in tracking a malware operators behavior, here is a comprehensive write-up about what goes into the GDID and how it is used.

Jul 14, 2026 4 Min Read Application Security Cursor IDE Auto-Executes Malicious Code in Poisoned Repos by Alexander Culafi Jul 14, 2026 6 Min Read ...