GitHub moved the AI coding landscape on Wednesday when it made Kimi K2.7 Code — a Beijing-built, open-weight model from Moonshot AI — generally available in the GitHub Copilot model picker, marking ...

VS Code 1.127 enhances agent session management, introduces per-site browser permissions, and makes browser tools for agents ...

Visual Studio Code 1.126 adds AI chat cost tracking, multiple Copilot chats in one session, and a safer Restricted Mode for ...

[UPDATE 04.06.2026 – 23:33 CEST] Microsoft says the issue was mitigated for its services on June 3, 2026, and that no customer action is required; this article has been updated to reflect the current ...

A security researcher has disclosed details of a severe Visual Studio Code (VS Code) vulnerability that can be exploited to steal a user’s GitHub token and access their repositories. The vulnerability ...

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a ...

A security researcher has publicly disclosed a new Visual Studio Code zero-day vulnerability that can reportedly let attackers steal GitHub authentication tokens through github.dev. Microsoft has not ...

Cybersecurity researchers have disclosed a one-click attack via Microsoft Visual Studio Code (VS Code) that makes it possible to steal a user's GitHub token. "Just by clicking a link, it's possible ...

An audience member seated near a Microsoft logo listens as Microsoft Chairman and Chief Executive Officer Satya Nadella speaks during the Microsoft Build conference opening keynote in Seattle, ...

What we know so far: Hackers have reportedly used a malicious Visual Studio Code extension to gain access to a GitHub developer's machine, then leveraged the stolen credentials to move into GitHub's ...

Outages have plagued Microsoft's GitHub unit this year as the soaring popularity of vibe coding stressed its infrastructure. GitHub's drawn-out migration to Microsoft's Azure has limited its computing ...

GitHub has confirmed that a recent breach into its internal repositories was caused by a vulnerability in a Microsoft Visual Studio Code (VS Code) extension called ‘Nx Console.’ The security team at ...