VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...
Visual Studio Magazine

Claude Opus 4.5 Lands in GitHub Copilot for Visual Studio and VS Code

GitHub has added Anthropic's Claude Opus 4.5 to the set of models available in GitHub Copilot Chat, and the model is now selectable directly inside Microsoft developers' primary tools: Visual Studio ...
TechCrunch

GitHub’s latest AI tool can automatically fix code vulnerabilities

It’s a bad day for bugs. Earlier today, Sentry announced its AI Autofix feature for debugging production code and now, a few hours later, GitHub is launching the first beta of its code-scanning ...
Visual Studio Magazine

Hands On with New Experimental GitHub Copilot 'Agent Skills' in VS Code

Visual Studio Code 1.108 adds experimental Agent Skills, allowing GitHub Copilot to load custom instructions, scripts, and resources for specialized tasks. Agent Skills are defined in a simple folder ...
Bleeping Computer

VS Code zero-day lets hackers steal GitHub tokens in one click

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a ...