Cybercriminals Use VSCode Extensions as New Attack Vector

Microsoft’s Visual Studio Code integrated development environment (IDE) is used by as much as 75% of developers, so any security issue has widespread implications. And Aqua Nautilus researchers have discovered a big one. The researchers reported earlier this month that the VSCode editor could be vulnerable to attacks targeting its extensions. The free open source […]

The post Cybercriminals Use VSCode Extensions as New Attack Vector appeared first on eSecurityPlanet.

application security aqua attack attacks attack vector big code code security cybercriminals cybersecurity developers developer security development editor environment extensions free ide integrated development environment issue microsoft open source researchers security studio supply chain security targeting threats visual studio visual studio code vscode vulnerable