Attack on GitHub.dev steals OAuth token for all repos

The web version of the VS Code editor on GitHub.dev had a security vulnerability that allowed attackers to take over all of a ...
note

[Security Explanation] Can a repository be hijacked with one click? The surprising vulnerability that existed in the browser version of VSCode (github.dev)

Hello! I share information on the basics of IT technology and how to apply it in practice in an easy-to-understand way. In this article, I will explain a shocking vulnerability announced in June 2026 ...
GitHub

Kite Autocomplete Plugin for Visual Studio Code

Kite is an AI-powered programming assistant that helps you write code faster inside Visual Studio Code. Kite helps you write code faster by saving you keystrokes and showing you the right information ...

New GitHub Zero-Day Exposed Developer Tokens to Attackers

A github.dev flaw could let attackers steal GitHub OAuth tokens through a one-click attack, exposing private repositories and ...

Cloudflare acquires VoidZero, maker of the Vite JavaScript toolchain

Cloudflare Inc. today said it has acquired VoidZero Inc., the open-source company behind Vite and the widely used JavaScript ...
Windows Report

Visual Studio Code Adds More Autonomous AI Workflows and Cross-Device Agent Sessions

Visual Studio Code 1.124 brings more autonomous AI agents, cross-device session support, browser history, and new enterprise controls.
How-To Geek on MSN

I built a fully local AI coding assistant in Windows with Ollama and VS Code

The only operating cost is electricity.
InfoWorld

Software Development

Hole in GitHub’s browser-based VSCode editor could lead to stolen token Its disclosure raises questions about what security researchers should expect from vendors, and how far in advance of its ...
GitHub

Agent Skills Marketplace for VS Code

A VS Code extension that provides a marketplace for discovering, installing, and managing Agent Skills - reusable tools and capabilities for AI agents and Claude assistants.