New Flaw in IDEs Like Visual Studio Code Lets Malicious Extensions Bypass Verified Status
Read More A new study of integrated development environments (IDEs) like Microsoft Visual Studio Code, Visual Studio, IntelliJ IDEA, and Cursor has revealed weaknesses in how they handle the extension verification process, ultimately enabling attackers to execute...
A New Maturity Model for Browser Security: Closing the Last-Mile Risk
Read More Despite years of investment in Zero Trust, SSE, and endpoint protection, many enterprises are still leaving one critical layer exposed: the browser. It’s where 85% of modern work now happens. It’s also where copy/paste actions, unsanctioned GenAI usage,...
Chrome Zero-Day CVE-2025-6554 Under Active Attack — Google Issues Security Update
Read More Google has released security updates to address a vulnerability in its Chrome browser for which an exploit exists in the wild. The zero-day vulnerability, tracked as CVE-2025-6554 (CVSS score: N/A), has been described as a type confusing flaw in the V8...