VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.

IT之家 6 月 3 日消息，安全研究员 Ammar Askar 昨日（6 月 2 日）发布推文，公开了一个概念验证（PoC）漏洞，指出 GitHub 浏览器版 VS Code 存在安全漏洞，用户点击链接后，GitHub OAuth tokens 可能被黑客掌握。 IT之家援引博文介绍，该漏洞受存在于 GitHub 浏览器版 VS Code（github.dev）的 Webview 机制中。Web ...

I ditched VS Code for Zed instead of going for Google's Antigravity, and now the editor feels genuinely fast ...

Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other ...

Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard ...

Troy baseball has been around since 1911. That’s 115 years. Yet, the Trojans hold a chance to do something Monday they’ve ...

Anthropic releases Claude Opus 4.8 with dynamic workflows, 1,000 parallel subagents, and 3x cheaper fast mode. Here's what ...

A recent Stack Overflow survey found that more than 84% of developers are already using or planning to use AI tools in their workflow. After trying OpenAI Codex for myself, I understand why. Like many ...

Starlink controversy, AI psychosis debates, invisible malware takedowns, and dangerous MCP vulnerabilities dominated this ...

Compare top AI app builders for prototyping, mobile apps, internal tools, backend depth, security, pricing, and code ...

Your Monday cybersecurity recap covers the latest digital threats, exposed weaknesses, active attacks, and security stories ...