From Cyber Security News – VS Code Marketplace Flaw Let Attackers Include Malicious Extensions

[[{“value”:”Researchers identified security vulnerabilities in the VS Code Marketplace that could be exploited by malicious actors, as these flaws allowed extensions with malicious dependencies to gain credibility (through high install numbers) and access to user systems.  They found extensions that communicated with suspicious addresses, executed unknown binaries, and contained hardcoded secrets, highlighting the need for
The post VS Code Marketplace Flaw Let Attackers Include Malicious Extensions appeared first on Cyber Security News.”}]] Read More