Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.

The project is in an experimental, pre-alpha, exploratory phase with the intention to be productionized. We move fast, break things, and explore various aspects of the seamless developer experience ...

A spear-phishing campaign tied to the Democratic People's Republic of Korea (DPRK) uses trusted Microsoft infrastructure to ...

Microsoft has released the Copilot Studio extension for Visual Studio Code to general availability, enabling teams to build, ...

The contagious interview campaign continues.

Threat actors behind the campaign are abusing Microsoft Visual Studio Code’s trusted workflows to execute and persist ...

A review of five non-Copilot AI coding assistants available in the Visual Studio Marketplace that support Visual Studio 2026 ...

ConsentFix is an OAuth phishing technique abusing browser-based authorization flows to hijack Microsoft accounts. Push ...

Sourcegraph’s AI code assistant goes beyond individual dev productivity, helping you achieve consistency and quality at scale with AI. Sourcegraph accelerates the entire workflow for developers by ...

Visual Studio and Azure DevOps are available both as individual products and services and as part of a subscription. Visual Studio Community is available only as an individual product, and only to ...