VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.

Recently GitHub launched its Github.dev service. If you’re browsing some code in a repo, all you need to do to launch an editor is press “.” or edit the page URL, switching out .com for .dev. This ...

A VS Code vulnerability in GitHub.dev lets attackers steal full GitHub OAuth tokens via a single malicious link, exposing all private repositories.

I wore the world's first HDR10 smart glasses TCL's new E Ink tablet beats the Remarkable and Kindle Anker's new charger is one of the most unique I've ever seen Best laptop cooling pads Best flip ...

Microsoft has released version 1.100 – of its free source code editor Visual Studio Code, also known as April 2025 – after the development month. The release brings new features for GitHub Copilot ...

Microsoft has released a new version of Visual Studio Code (VS Code), its hugely popular open-source code editor for Linux, macOS and Windows, which its creator, Microsoft technical fellow Erich Gamma ...

From an enterprise governance perspective, this means visual AI edits are subject to the exact same continuous integration ...

Its disclosure raises questions about what security researchers should expect from vendors, and how far in advance of its ...