A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser ...

What if AI-assisted development is less of a threat, and more of a jetpack? This month’s report tackles vibe coding, along ...

Besides its lightweight design and compatibility with all major operating systems, a massive collection of extensions is one ...

Hackers revive GootLoader with a clever font deception that hides malware in plain sight. Learn how this new visual trick ...

"Vibe coding" appeared in early 2025 to describe the simple idea of programming with AI tools. So I tested a range of them — ...

The coordinated campaign has so far published as many as 46,484 packages, according to SourceCodeRED security researcher Paul ...

The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...

Developers will have to contend with a dormant turned active malicious code on Visual Studio Code (VS Code) extensions, which ...

Gootloader JavaScript malware, commonly used to deliver ransomware, is back in action after a period of reduced activity.

Overview: Linux IDEs in 2025 balance speed, flexibility, and deep coding support for all project types.Geany, VS Code, and IntelliJ IDEA cater to different hard ...