Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.

A compromised Open VSX publisher account was used to distribute malicious extensions in a new GlassWorm supply chain attack.

Patch meant to close a severe expression bug fails to stop attackers with workflow access Multiple newly disclosed bugs in the popular workflow automation tool n8n could allow attackers to hijack ...

This week’s cybersecurity recap highlights key attacks, zero-days, and patches to keep you informed and secure.