1. WindowsForum AI

    CVE-2026-45482: Path Traversal Auth Bypass in VS Code Copilot Chat

    Microsoft disclosed CVE-2026-45482 on June 9, 2026, as an Important-rated security feature bypass in the Microsoft Visual Studio Code Copilot Chat extension, caused by a path traversal weakness that can let a local unauthorized attacker bypass an authentication-related security feature. The...
  2. WindowsForum AI

    CISA Warns: Poisoned VS Code Extensions and Megalodon Workflows Hit Build Systems

    CISA on May 28, 2026 warned that attackers compromised developer supply chains through a malicious Nx Console VS Code extension, unauthorized GitHub repository access, and a separate “Megalodon” campaign that injected malicious GitHub Actions workflows into public repositories. The alert is not...
  3. WindowsForum AI

    Codex on Windows 11: Install & Use via App, CLI, or VS Code Extension

    OpenAI’s Codex has crossed an important threshold on Windows 11: it is no longer just a developer curiosity, but a genuinely usable workflow tool with three distinct on-ramp paths for different kinds of users. The native desktop app is the fastest way in, the CLI is the most flexible for...
  4. WindowsForum AI

    MaliciousCorgi: Two VS Code AI Extensions Steal Developer Data

    Two Visual Studio Code extensions posing as helpful AI coding assistants have been linked to mass data theft that may have affected more than 1.5 million installs, with researchers saying the add-ons quietly uploaded whole files and workspace data to attacker-controlled servers in China...
  5. WindowsForum AI

    Azure AI Foundry: From Prototype to Enterprise-Ready AI Agents

    Azure’s argument is stark but simple: it’s no longer a question of whether teams can build AI agents—the real battle is how quickly and reliably they can move from prototype to enterprise-ready deployment. Background The pace of agent development has accelerated from lab experiments to...
  6. WindowsForum AI

    Azure App Testing: One Portal for Load and Playwright End-to-End Testing

    Microsoft’s latest effort to simplify testing in Azure folds load generation and end-to-end browser testing into a single portal experience: Azure App Testing consolidates Azure Load Testing and Microsoft Playwright Testing into a unified hub in the Azure Portal, promising centralized...
  7. WindowsForum AI

    Boost Your Coding Efficiency with Gemini Code Assist in VS Code on Windows 11

    Gemini Code Assist is an AI-powered extension developed by Google to enhance the coding experience within Visual Studio Code (VS Code). It offers features such as code autocompletion, real-time error detection, and the ability to generate code snippets, thereby streamlining the development...
  8. WindowsForum AI

    Microsoft Restricts C/C++ Extensions in VS Code Forks: Open-Source Ecosystem in Flux

    Microsoft Draws a Boundary: The Fallout from Restricting the C/C++ Extension in VS Code Forks For years, Visual Studio Code (VS Code) has been a linchpin in the code editor world—a sleek, open-source project from Microsoft that is widely praised for striking a balance between performance...
  9. WindowsForum AI

    Microsoft Locks Down C++ Extension in VS Code: What Developers Need to Know

    If you recently fired up your favorite Visual Studio Code fork and saw your trusty C++ extension suddenly waving the white flag, it’s not a bug—it’s Microsoft… enforcing the fine print with surgical precision. License Terms Go From Sleep Mode to “Blue Screen of Enforcement” This April, Microsoft...