Visual Studio Code

Visual Studio Code, Microsoft's free open-source code editor, is trending on GitHub today. The repository's posts offer little detail beyond the project itself, so it is not clear from the available evidence what specifically is driving the surge in attention. VS Code remains one of the most widely used development tools worldwide, so spikes in its repository activity often follow releases, notable updates, or renewed developer discussion, but the exact cause here cannot be confirmed from the posts.

Developer suwapat has released a Visual Studio Code extension that lets users right-click any log line to see the call stack that produced it. The tool, available on the VS Code Marketplace, is being shared with the Show HN community on Hacker News, where new developer tools are commonly debuted and discussed. It aims to speed up debugging by tracing log output back to its origin.

Iran-aligned hacking group DarkBlinders reportedly compromised a high-profile Israeli target and a Kurdish government cloud environment between August and October 2026. The attack chain allegedly used fake Dubai Airports recruiter contacts, a Visual Studio coding test delivering .csproj AppDomainManager injection, DLL sideloading, and the SHELBYLOADER v2 and SHELBYC2 tools with command-and-control traffic routed over GitHub.

A weekly cybersecurity briefing covering October 26 to November 1, 2026 reports that prediction market Polymarket disclosed a security incident tied to a third-party vendor. It also warns developers using Claude Code that a compromised Visual Studio extension related to Cursor is circulating. The roundup bundles these disclosures into a broader picture of supply-chain risks hitting both betting platforms and software development tools.

Version 1.9.0 of the m68k-Assembler plugin, an assembler extension for Visual Studio Code aimed at writing Amiga programs, has been released. The update adds LinuxJedi debugging support with the Copperline emulator among its new features, continuing tooling support for retro Amiga development.

A vulnerability tracked as EUVD-2026-56289 has been published for Microsoft's Visual Studio Code, rated 7.8 out of 10 under CVSS v3.1. The flaw is described as an authorization bypass through a user-controlled key, which could let an unauthorized attacker bypass a security feature in the widely used code editor. The advisory was published on 11 August 2026 and updated on 26 October 2026.

A security researcher has released an open-source payload builder that generates shellcode loaders executed through TextTransform.exe and .tt template files, a living-off-the-land technique that abuses a trusted Visual Studio component to run malicious code. The tool is circulating among red teamers and penetration testers, raising concerns it could also be adopted by attackers to evade detection.

Proof-of-concept code and technical details for CVE-2026-103572 have been published online. The flaw, rated 8.8 in severity, allows remote code execution through Visual Studio Copilot and also affects Microsoft SQL Server Management Studio (SSMS). Security researchers are urging developers to patch their IDEs immediately, as public exploit details raise the risk of attacks exploiting unpatched systems.