Everything you may have missed from the past week.

AI Toolkit for VS Code v0.30.0 adds a new Tool Catalog for discovering, configuring, and managing agent tools, including local stdio MCP servers and tools from the public Foundry catalog. A new Agent ...

One IDE to rule them all. You won't want to use anything else.

The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace ...

If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ Trivy maintainer says.

Manufact, a Y Combinator startup, raised $6.3 million to build open-source tools and cloud infrastructure for the Model Context Protocol (MCP), the fast-growing standard backed by Anthropic and OpenAI ...

威胁行为者滥用Open VSX注册表中的扩展依赖关系，间接传播GlassWorm供应链攻击恶意软件。Socket研究人员发现至少72个恶意扩展伪装成开发工具，通过extensionPack和extensionDependencies功能实现传递式投递。攻击者先发布看似无害的扩展获得信任，随后更新添加恶意依赖项。该活动模仿ESLint、Prettier等热门开发工具，还针对AI编码助手。研究人员建议 ...

TakeProfit is a free, ad-free charting platform designed for traders who want a clean learning environment with modular ...

At embedded world, on the DigiKey booth, Lucy Barnard speaks with Marta Barbero at Arduino, about the new Arduino product announcement.

Department of Environmental and Occupational Health Sciences, University of Washington, Seattle, United States College of Health Solutions, Arizona State University, Phoenix, United States ...