Three of the four vulnerabilities remained unpatched months after OX Security reported them to the maintainers.

Critical vulnerabilities in four widely used VS Code extensions could enable file theft and remote code execution across 125M installs.

The January 2026 release of Visual Studio Code expands AI-assisted development with structured planning agents, parallel subagents, and unified orchestration across local and cloud environments.

VS Code forks are diverging rapidly, not just in features, but in how they structure AI-assisted development workflows. Cursor emphasizes speed and visual polish, Windsurf leans toward dynamic ...

Four serious new vulnerabilities affect Microsoft Visual Studio Code, Cursor and Windsurf extensions, three of which remain ...

Katherine Haan, MBA, is a Senior Staff Writer for Forbes Advisor and a former financial advisor turned international bestselling author and business coach. For more than a decade, she’s helped small ...