Everything you may have missed from the past week.

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...

VS Code keeps adding new features as time goes on, and if you weren't careful, you likely missed things like sticky scroll, zen mode, and more.

Microsoft's AI Toolkit extension for VS Code now lets developers scaffold a working MCP server in minutes. Here's what that looks like in practice -- including the parts that don't work, and a simpler ...

VS Code 1.112 adds native image support for agents, and I used it on three Microsoft AI Foundry leaderboard screenshots to see whether it could turn chart-heavy visuals into a useful developer summary ...

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...

Malicious JavaScript code delivered by the AppsFlyer Web SDK hijacked cryptocurrency, potentially in a supply-chain attack.

GlassWorm campaign used 72 malicious Open VSX extensions and infected 151 GitHub repositories, enabling stealth supply-chain ...

One of the most popular ways to view the Epstein Files, an interface called Jmail that mimics a Gmail inbox, is hosted on ...

OpenAI streamlines its ecosystem with an all-in-one desktop platform built for agentic AI, developers and enterprise power ...

Apple's press release and marketing materials for the new Studio Display and Studio Display XDR models do not mention which chips are inside the monitors, but MacRumors has confirmed this information ...

Tencent-backed TiMi Montreal is shutting down less than five years after opening and without ever shipping a game. It appears to be the latest casualty of Chinese publishers pulling back on investment ...