Threat actors abused Velociraptor via Cloudflare Workers in 2024, enabling C2 tunneling and ransomware precursors ...

VS Code flaw lets attackers reuse deleted extension names, enabling ransomware payload delivery and supply chain risks.

Visual Studio Code extensions have been identified exploiting a loophole that allows reuse of names from removed packages ...

Bitdefender discovered RustDoor, a macOS malware with multiple variants, disseminating through malicious Visual Studio updates, potentially linking to the ALPHV/BlackCat ransomware gang.